# changelog

author: Phil Sutter <psutter@redhat.com> - 0.0.4-16
changelog:
  - Integrate with alternatives
  - Split systemd service into sub-package
  - Rename arptables RPM into arptables-legacy
  - Add recent upstream changes


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-8
changelog:
  - ci-ssh_utils.py-ignore-when-sshd_config-options-are-not.patch [bz#1862933]
  - Resolves: bz#1862933
    (cloud-init fails with ValueError: need more than 1 value to unpack[rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-9
changelog:
  - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2013644]
  - Resolves: bz#2013644
    (cloud-init fails to set host key permissions correctly)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-10
changelog:
  - ci-fix-error-on-upgrade-caused-by-new-vendordata2-attri.patch [bz#2021538]
  - Resolves: bz#2021538
    (cloud-init.service fails to start after package update)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-11
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028028]
  - Resolves: bz#2028028
    ([RHEL-8] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-12
changelog:
  - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2039697]
  - ci-Datasource-for-VMware-953.patch [bz#2026587]
  - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2026587]
  - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2026587]
  - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2026587]
  - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2026587]
  - Resolves: bz#2039697
    ([RHEL8] [Azure] cloud-init fails to configure the system)
  - Resolves: bz#2026587
    ([cloud-init][RHEL8] Support for cloud-init datasource 'cloud-init-vmware-guestinfo')


author: Jon Maloy <jmaloy@redhat.com> - 21.1-13
changelog:
  - ci-Add-flexibility-to-IMDS-api-version-793.patch [bz#2023940]
  - ci-Azure-helper-Ensure-Azure-http-handler-sleeps-betwee.patch [bz#2023940]
  - ci-azure-Removing-ability-to-invoke-walinuxagent-799.patch [bz#2023940]
  - ci-Azure-eject-the-provisioning-iso-before-reporting-re.patch [bz#2023940]
  - ci-Azure-Retrieve-username-and-hostname-from-IMDS-865.patch [bz#2023940]
  - ci-Azure-Retry-net-metadata-during-nic-attach-for-non-t.patch [bz#2023940]
  - ci-Azure-adding-support-for-consuming-userdata-from-IMD.patch [bz#2023940]
  - Resolves: bz#2023940
    ([RHEL-8] Support for provisioning Azure VM with userdata)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-14
changelog:
  - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2046540]
  - Resolves: bz#2046540
    (cloud-init writes route6-$DEVICE config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than "fd00:fd00:fd00::/ffff:ffff:ffff:ffff::".)


author: Camilla Conte <cconte@redhat.com> - 21.1-15
changelog:
  - ci-Detect-a-Python-version-change-and-clear-the-cache-8.patch [bz#1935826]
  - ci-Fix-MIME-policy-failure-on-python-version-upgrade-93.patch [bz#1935826]


author: Dusty Mabe <dusty@dustymabe.com> - 053-4
changelog:
  - Backport: fix(dracut-logger.sh): double dash trigger unknown logger warnings during run
  - Backport: fix(network-manager): nm-run.service: don't kill forked processes
  - Backport: fix(network-manager): only run NetworkManager if rd.neednet=1
  - Backport: fix(network-manager): use /run/NetworkManager/initrd/neednet in initqueue


author: Harald Hoyer <harald@redhat.com> - 054-12.git20210521
changelog:
  - fix `get_maj_min` for kdump
  - suppress hardlink output
  - sane default --kerneldir for dracut-install
  - squash: don't mount the mount points if already mounted


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.16-1
changelog:
  - New release: 1.16
  - BTF encoder: Preserve and encode exported functions as BTF_KIND_FUNC.
  - BTF loader: Add support for BTF_KIND_FUNC
  - Pretty printer: Account inline type __aligned__ member types for spacing
  - Pretty printer: Fix alignment of class members that are structs/enums/unions
  - Pretty printer: Avoid infinite loop trying to determine type with static data member of its own type.
  - RPM spec file:  Add dwarves dependency on libdwarves1.
  - pfunct: type->type == 0 is void, fix --compile for that
  - pdwtags: Print DW_TAG_subroutine_type as well
  - core: Fix ptr_table__add_with_id() handling of pt->nr_entries
  - pglobal: Allow passing the format path specifier, to use with BTF
  - Tree wide: Fixup issues pointed out by various coverity reports.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.17-1
changelog:
  - New release: 1.17
  - Support raw BTF as available in /sys/kernel/btf/vmlinux.
  - When the sole argument passed isn't a file, take it as a class name:
  - Do not require a class name to operate without a file name.
  - Make --find_pointers_to consider unions:
  - Make --contains and --find_pointers_to honour --unions
  - Add support for finding pointers to void:
  - Make --contains and --find_pointers_to to work with base types:
  - Make --contains look for more than just unions, structs:
  - Consider unions when looking for classes containing some class:
  - Introduce --unions to consider just unions:
  - Fix -m/--nr_methods - Number of functions operating on a type pointer


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.18-1
changelog:
  - New release: 1.18
  - Use debugging info to pretty print raw data
  - Store percpu variables in vmlinux BTF.
  - Fixes to address segfaults on the gdb testsuite binaries
  - Bail out on partial units for now, avoiding segfaults and providing warning to user.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.19-1
changelog:
  - New release: 1.19
  - Split BTF
  - DWARF workarounds for DW_AT_declaration
  - Support cross-compiled ELF binaries with different endianness
  - Support showing typedefs for anonymous types
  - Speedups using libbpf algorithms
  - See changes-v1.19 for a complete and more detailed list of changes


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.20-1
changelog:
  - New release: v1.20
  - btf_encoder:
  - Improve ELF error reporting using elf_errmsg(elf_errno())
  - Improve objcopy error handling.
  - Fix handling of 'restrict' qualifier, that was being treated as a 'const'.
  - Support SHN_XINDEX in st_shndx symbol indexes
  - Cope with functions without a name
  - Fix BTF variable generation for kernel modules
  - Fix address size to match what is in the ELF file being processed.
  - Use kernel module ftrace addresses when finding which functions to encode.
  - libbpf:
  - Allow use of packaged version.
  - dwarf_loader:
  - Support DW_AT_data_bit_offset
  - DW_FORM_implicit_const in attr_numeric() and attr_offset()
  - Support DW_TAG_GNU_call_site, standardized rename of DW_TAG_GNU_call_site.
  - build:
  - Fix compilation on 32-bit architectures.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.21-1
changelog:
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Bhavin Gandhi <bhavin7392@gmail.com> - 1:27.1-1
changelog:
  - emacs-27.1 is available (#1867841)
  - Add systemd-devel to support Type=notify in unit file
  - Build with Cairo and Jansson support
  - Remove ImageMagick dependency as it's no longer used


author: Jan Synáček <jsynacek@redhat.com> - 1:27.1-2
changelog:
  - use make macros (original patch provided by Tom Stellard)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.4-1
changelog:
  - New version
    Resolves: rhbz#1818417
  - Added all glibc langpacks to allow more locale sensitive tests to run
  - Added perl-FileHandle requirement for the filename-lineno.pl test


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.7-1
changelog:
  - New version
    Resolves: rhbz#1993631
  - Temporarily switch to the included regex until glibc bug (glibc#11053)
    is fixed


author: Julien Thierry <jthierry@redhat.com> 0.9.2-2
changelog:
  - Fix unload issue under stress (rhbz#1883238)
  - Fix dnf-kpatch man file permissions (rhbz#1899341)
  - Do not replace dnf kpatch configuration file when reinstalling (rhbz#1898191)


author: Davide Cavalca <dcavalca@fb.com> - 0.9.3-1.1
changelog:
  - Update to 0.9.3 and drop upstreamed patches
  - Downgrade kpatch-dnf dependency to a Suggests
  - Add patch to ignore .printk_index sections


author: Davide Cavalca <dcavalca@centosproject.org> - 0.9.4-1.7
changelog:
  - Backport PR#1231 for clang PGO support
  - Exclude aarch64 and s390x as kpatch is not supported there


author: Davide Cavalca <dcavalca@centosproject.org> - 0.9.4-1.6
changelog:
  - Sync with c8s-sig-hyperscale
  - Update to 0.9.4
  - Add kpatch-build arched subpackage
  - Add kpatch-runtime noarch subpackage to provide and obsolete kpatch


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-16
changelog:
  - Use 2048bit keys in tests
  - Resolves: rhbz#1611729 - [RHEL8-S-BUILD] libuser Fails Scratch Build on rhel-8.0


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-17
changelog:
  - Resolves: rhbz#1558151 - libuser needs audit events around the account
                             lifecycle


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-19
changelog:
  - Resolves: rhbz#1602600 -  Please review important issues found by covscan
                              in "libuser-0.62-14.el8+7" package


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-20
changelog:
  - Resolves: rhbz#1637398 - libuser-python3 should be renamed to comply
                             with Packaging Guidelines


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-23
changelog:
  - Actually apply the patch from the previous build
  - Resolves: rhbz#1670997 - Amend the user lifecycle auditing


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
changelog:
  - fix handling of zero-length messages
  - minimize default configuration
  - remove obsolete build requirement


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Davide Cavalca <dcavalca@centosproject.org> - 3.1.1^20220726git6c42e5-1.1
changelog:
  - Hyperscale build
  - Update to git snapshot and drop merged patches
  - Backport FB patches pending upstreaming
  - Disable broken tests


author: Davide Cavalca <dcavalca@centosproject.org> - 3.1.1^20221207git6bac46-1.1
changelog:
  - Update to the latest git snapshot and drop merged patches
  - Backport two more bugfix patches
  - Temporarily ignore test failures


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 0.55.3-3
changelog:
  - build: use PIE objects for static libraries
    Resolves: rhbz#1899620
    (meson builds QEMU with PIC objects instead of PIE)


author: Davide Cavalca <dcavalca@centosproject.org> - 0.61.3-1.1
changelog:
  - Drop usage of version_no_tilde macro to fix the el8 build
  - Disable deprecation notice for Python 3.6


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-6
changelog:
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
  - Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)


author: Brian C. Lane <bcl@redhat.com> - 3.26-1
changelog:
  - Makefile: Fix gpg signature (bcl)
  - Add RHEL8_Repo, RHEL8_RepoData, and RHEL8_Url classes (bcl)
  - pylint: Fix warnings and errors from pylint 2.5.x (bcl)
  - i18n: Use gettext instead of lgettext (bcl)
  - Use W9902 in pylint disable to avoid warnings about _ (bcl)
  - Add python 3.8 to travis.yml (bcl)
  - docs: Fix network.py documentation markup (bcl)
  - docs: versionadded directive needs a blank line after it (bcl)
  - docs: Maintain programmers-guide in the repo (bcl)
  - Makefile: Add creating the detached signature to the release make target (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.27-1
changelog:
  - tests: Fix pylint warnings in timezone tests (bcl)
  - Mark --ntpservers and --nontp options of timezone command as deprecated (mkolman)
  - Add the timesource command (mkolman)


author: Brian C. Lane <bcl@redhat.com> - 3.28-1
changelog:
  - Makefile: Add __init__.py with new version to bumpver commit (bcl)
  - tests: Ignore W0707 raise-missing-from warnings (bcl)
  - Add Fedora 34 support (bcl)
  - Add new tests for the harddrive biospart parameter removal (jkonecny)
  - Remove biospart from harddrive command (jkonecny)
  - move dependencies into setup.py and use setuptools (carlos)
  - remove reference to py3 as a requirement (carlos)
  - remove references to nose test framework (carlos)
  - update dist to 18.04 (carlos)
  - add ci test for future py ver (carlos)
  - use new travis-ci syntax (carlos)
  - parser: Remove OrderedSet (bcl)
  - tests: Add a slightly different test for Package.add (bcl)
  - Add pykickstart.__version__ string (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.30-1
changelog:
  - ksshell: Fix traceback and add tests (bcl)
  - fs: Make tmp file creation cross-platform in ksvalidator to support Windows


author: Brian C. Lane <bcl@redhat.com> - 3.31-1
changelog:
  - Add make to BuildRequires, buildroot is removing it.
  - Deprecate the autostep command (vslavik)
  - Add missing spaces into the message (yurchor)
  - ksshell: Fix indentation in _init_matches (bcl)
  - Mark the level option of the logging command as deprecated (vponcova)


author: Brian C. Lane <bcl@redhat.com> - 3.32-1
changelog:
  - Conditionally BuildRequire coverage and sphinx for runtests (bcl)
    Resolves: rhbz#1916735
  - Change the lilo command removal to use RemovedCommand (vslavik)
  - Change the lilocheck command removal to use RemovedCommand (vslavik)
  - Fix test for the removed "interactive" command (vslavik)
  - Change the langsupport command removal to use RemovedCommand (vslavik)
  - Change the monitor command removal to use RemovedCommand (vslavik)
  - Change the mouse command removal to use RemovedCommand (vslavik)
  - Change the upgrade command removal to use RemovedCommand (vslavik)
  - Fix ksverdiff detection of removed commands (vslavik)
  - Check warnings of the deprecated kickstart commands (vponcova)
  - Remove the install command (vslavik)
  - Remove the deviceprobe command (vslavik)
  - Remove the device command (vslavik)
  - Remove the dmraid command (vslavik)
  - Remove the multipath command (vslavik)
  - Fix deprecation test for removed commands (vslavik)
  - Switch interactive removal to use RemovedCommand (bcl)
  - Add RemovedCommand for removing commands and documenting them (bcl)
  - Remove support for the updates command without an URL (vponcova)
  - Document how to deprecate commands and options (bcl)
  - Remove the ignoredisk --interactive option (vslavik)
  - Remove the partition --active option (vslavik)
  - Deprecate the %traceback section (vslavik)
  - Add missing .coveragerc file (bcl)
  - Switch to using GitHub Actions instead of Travis CI (bcl)
  - Add support for running via tox (bcl)
  - Deprecate the method command (vslavik)
  - Remove the bootloader option --upgrade (vslavik)


author: David Johansen <david@makewhat.is> - 0.6.6-1
changelog:
  - Bump to version 0.6.6 and include patches for ras-mc-ctl fixes
  - Include patches for page-offlining fixes


author: David Johansen <david@makewhat.is> - 0.6.7-1
changelog:
  - Build release 0.6.7 and remove backport patches
  - shardstatdir/rasdaemon is now created at runtime.


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-57
changelog:
  - Allow dovecot bind to smtp ports
  Resolves: rhbz#1881884
  - Change fetchmail temporary files path to /var/spool/mail
  Resolves: rhbz#1853389
  - Set file context for symlinks in /etc/httpd to etc_t
  Resolves: rhbz#1900650
  - Allow dnsmasq read public files
  Resolves: rhbz#1782539
  - Fix range for unreserved ports
  Resolves: rhbz#1794531
  - Introduce logging_syslogd_append_public_content tunable
  Resolves: rhbz#1823672
  - Add files_search_non_security_dirs() interface
  Resolves: rhbz#1823672
  - Add miscfiles_append_public_files() interface
  Resolves: rhbz#1823672


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-58
changelog:
  - Allow kexec manage generic tmp files
  Resolves: rhbz#1896424
  - Update systemd-sleep policy
  Resolves: rhbz#1850177
  - Add groupadd_t fowner capability
  Resolves: rhbz#1884179


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-59
changelog:
  - Add cron_dbus_chat_system_job() interface
  Resolves: rhbz#1883906
  - Dontaudit firewalld dac_override capability
  Resolves: rhbz#1759010
  - Allow tcsd the setgid capability
  Resolves: rhbz#1898694
  - Allow timedatex dbus chat with cron system domain
  Resolves: rhbz#1883906
  - Allow systemd_hostnamed_t domain to dbus chat with sosreport_t domain
  Resolves: rhbz#1854299
  - Allow pcp-pmcd manage perf_events
  Resolves: rhbz#1901958
  - Label /dev/isst_interface as cpu_device_t
  Resolves: rhbz#1902227
  - Allow ipsec set the context of a SPD entry to the default context
  Resolves: rhbz#1880474
  - Allow sysadm_u user and unconfined_domain_type manage perf_events
  Resolves: rhbz#1901958
  - Add manage_perf_event_perms object permissions set
  Resolves: rhbz#1901958
  - Add perf_event access vectors.
  Resolves: rhbz#1901958
  - Remove "ipa = module" from modules-targeted-contrib.conf
  Resolves: rhbz#1461914


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-60
changelog:
  - Allow wireshark create and use rdma socket
  Resolves: rhbz#1844370
  - Allow to use nnp_transition in pulseaudio_role
  Resolves: rhbz#1854471
  - Allow certmonger fsetid capability
  Resolves: rhbz#1873211
  - Add rsync_sys_admin tunable to allow rsync sys_admin capability
  Resolves: rhbz#1889673
  - Allow sysadm read and write /dev/rfkill
  Resolves: rhbz#1831630
  - Allow staff_u run pam_console_apply
  Resolves: rhbz#1817690
  - Label /dev/vhost-vdpa-[0-9]+ as vhost_device_t
  Resolves: rhbz#1907485


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-61
changelog:
  - Add kpatch_exec() interface
  Resolves: rhbz#1895322
  - Allow rhsmcertd execute kpatch
  Resolves: rhbz#1895322
  - Allow openvswitch_t perf_event open permission
  Resolves: rhbz#1916046
  - Allow openvswitch fowner capability and create netlink sockets
  Resolves: rhbz#1883980
  - Add net_broadcast capability to openvswitch_t domain
  Resolves: rhbz#1883980
  - Update interface modutils_read_module_deps to allow caller domain also mmap modules_dep_t files
  Resolves: rhbz#1883980
  - Allow machinectl to run pull-tar
  Resolves: rhbz#1788055


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-62
changelog:
  - Allow rhsmcertd_t domain transition to kpatch_t
  Resolves: rhbz#1895322
  - Revert "Add kpatch_exec() interface"
  Resolves: rhbz#1895322
  - Revert "Allow rhsmcertd execute kpatch"
  Resolves: rhbz#1895322
  - Dontaudit NetworkManager_t domain to write to kdump temp pipies
  Resolves: rhbz#1842897
  - Allow NetworkManager_t domain to get status of samba services
  Resolves: rhbz#1781806
  - Allow openvswitch create and use xfrm netlink sockets
  Resolves: rhbz#1916046
  - Allow openvswitch_t perf_event write permission
  Resolves: rhbz#1916046
  - Add write_perf_event_perms object permission set
  Related: rhbz#1916046


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-63
changelog:
  - Allow rtkit_daemon_t domain set process nice value in user namespaces
  Resolves: rhbz#1910507
  - Allow gpsd read and write ptp4l_t shared memory.
  Resolves: rhbz#1803845
  - Label /var/run/pcsd-ruby.socket socket with cluster_var_run_t type
  Resolves: rhbz#1804626
  - Allow Certmonger to use opencryptoki services
  Resolves: rhbz#1894132
  - Dontaudit vhostmd to write in /var/lib/rpm/ dir and allow signull rpm
  Resolves: rhbz#1815603
  - Allow rhsmcertd_t read kpatch lib files
  Resolves: rhbz#1895322
  - Allow ipsec_t connectto ipsec_mgmt_t
  Resolves: rhbz#1848355
  - Allow IPsec to use opencryptoki services
  Resolves: rhbz#1894132
  - Allow systemd-importd create /run/systemd/machines.lock file
  Resolves: rhbz#1788055


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-64
changelog:
  - Allow unconfined_t and kprop_t to create krb5_0.rcache2 with the right context
  Resolves: rhbz#1874527
  Resolves: rhbz#1877044
  - Allow rhsmcertd bind tcp sockets to a generic node
  Resolves: rhbz#1923985
  - Allow ipsec_mgmt_t mmap ipsec_conf_file_t files
  Resolves: rhbz#1889542
  - Allow strongswan start using swanctl method
  Resolves: rhbz#1889542
  - Allow systemd-importd manage machines.lock file
  Resolves: rhbz#1788055


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Bruno Wolff III <bruno@wolff.to> - 4.5-24.20220308git8b6ee89
changelog:
  - Continue testing upstream patches prior to 4.5.1 release.
  - Minor fixes
  - Man page tweaks
  - Tentative 4.5.1 change log


author: Anita Zhang <anitazha@fb.com> - 247.3-1
changelog:
  - New release for 247
  - Backport PR #18211 (Fixes ExecCondition= dependency bug)
  - Backport PR #17872 (Fixes PrivateUsers=yes with other sandboxing properties)
  - FB only backport PR #17495 (Fixes BPF pinning post-coldplug)
  - Reenable audit support


author: Anita Zhang <anitazha@fb.com> - 247.3-4
changelog:
  - Backport PR #18955 (Fixes fstab parsing)
  - FB only backport PR #18886 (systemd-shutdown logs to /dev/console not stderr)
  - Reenable tests by disabling LTO (work around binutils bug)


author: Anita Zhang <anitazha@fb.com> - 247.3-6
changelog:
  - Backport PR#18621 (Ignore attempts at hidepid and subset for older kernels)
  - Downgrade sysv-generator warning about missing native systemd unit


author: Davide Cavalca <dcavalca@fb.com> - 247.3-8
changelog:
  - Backport https://github.com/SELinuxProject/refpolicy/pull/308 to fix
    systemd-hostnamed and systemd-localed when SELinux is enabled.


author: Davide Cavalca <dcavalca@fb.com> - 246.1-2
changelog:
  - Initial Hyperscale SIG package
  - Update release to use %dist macro
  - Drop el7 logic
  - Explicitly default non-FB built to the legacy hierarchy
  - Drop no longer needed FB FusionIO patch
  - Temporarily disable audit support while debugging a link issue


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248-1
changelog:
  - Latest upstream release, see
    https://github.com/systemd/systemd/blob/v248/NEWS.
  - The changes since -rc4 are rather small, various fixes all over the place.
    A fix to how systemd-oomd selects a candidate to kill, and more debug logging
    to make this more transparent.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.1-1
changelog:
  - Latest stable version: a long list of minor correctness fixes all around
    (#1955475, #911766, #1958167, #1952919)
  - Enable tpm2-tss dependency (#1949505)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.2-1
changelog:
  - Pull in some more patches from upstream (#1944646, #1885090, #1941340)
  - Adjust modes of some %ghost files (#1956059)


author: Anita Zhang <anitazha@fb.com> - 248.2-1.1
changelog:
  - New release for 248
  - Drop patches merged in 248.2
  - FB only backport PR #13496 (Extend bpf cgroup program support)


author: Anita Zhang <anitazha@fb.com> - 248.2-1.5
changelog:
  - Remove backport PR #19811 since it's still buggy
  - Remove d586f642fd90e3bb378f7b6d3e3a64a753e51756 to fix rate limiting instead
    (at least until sd-event rate limiting is fixed in 249).


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.3-1
changelog:
  - A fix for resolved crashes (#1946386, #1960227, #1950241)
  - Some minor fixes for documentation, systemd-networkd, systemd-run, bootctl.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.4-1
changelog:
  - Assorted fixes (some systemd-resolved crashes, invalid
    systemd-tmpfiles assertion, etc.)
  - systemd-networkd workaround for TALOS-2020-1142, CVE-2020-13529.
  - A big update of hardware descriptions.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.5-1
changelog:
  - Various minor documentation and correctness fixes.
  - CVE-2021-33910, #1984020: an unchecked stack allocation could be used to
    crash systemd and cause the system to reboot by creating a very long
    fuse mountpoint path.


author: Davide Cavalca <dcavalca@centosproject.org> - 248.5-1.2
changelog:
  - Add missing SELinux rules for 248
    (https://pagure.io/centos-sig-hyperscale/package-bugs/issue/1)


author: Davide Cavalca <dcavalca@centosproject.org> - 248.5-1.3
changelog:
  - Add missing SELinux rules for the GNOME and KDE LiveDVD spins
    (https://pagure.io/centos-sig-hyperscale/package-bugs/issue/7)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 249.2-1
changelog:
  - Build with -Ddefault-dns-over-tls=opportunistic
    (https://fedoraproject.org/wiki/Changes/DNS_Over_TLS, #1889901)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249.2-1
changelog:
  - Latest bugfix release (a minor hwdb regression bugfix, and correction
    to kernel commandline handling when reexecuting PID 1 in a container)


author: Anita Zhang <the.anitazha@gmail.com> - 249.2-1.1
changelog:
  - New release for 249
  - Drop merged patches
  - Split networkd and resolved into their own subpackages.


author: Anita Zhang <the.anitazha@gmail.com> - 249.2-1.2
changelog:
  - Remove Obsoletes lines on systemd-resolved and systemd-networkd since we don't
    want to install these by default.


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-2.5
changelog:
  - Remove duplicate Address= properties in network configs (part of PR #20892)
  - Serialize bpf device programs across reloads/reexecs (PR #20978)
  - Don't rewrite sysctls that are already set (PR #20676)


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-2.8
changelog:
  - Remove revert_d219a2b07cc5dc8ffd5010f08561fab2780d8616.patch and replace with
    proper fix (PR #21221)


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-2.10
changelog:
  - Re-enable fdisk and repart since util-linux-2.32.1-26 in C8s has the fix
    it needs for tests to pass.


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-2.12
changelog:
  - Backport PR #20695: Sync if_arp.h with Linux 5.14
  - FB-only backport PR #22426: MemoryZSwapMax= to configure memory.zswap.max


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 249-2.13
changelog:
  - Move to dist-git layout used by Fedora (no more SOURCES/ and SPECS/)
  - Switch to .gitignore from commit 46a40810 from the Fedora RPM repo
  - Add back removed files from commit 46a40810 from the Fedora RPM repo


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249.3-1
changelog:
  - Latest bugfix release: improved compatibility with latest glibc,
    various small documentation fixes, and fixes for systemd-networkd bridging,
    other minor fixes.
  - systemctl set-property accepts glob patterns now (#1986258)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249.4-1
changelog:
  - Latest bugfix release: various fixes for systemd-networkd,
    systemd-resolved, systemd, systemd-boot.
  - Backport of macros to restart systemd user units (#1993244)


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-1.1
changelog:
  - New stable point release
  - Backport optimization for read_virtual_file() (#20743)
  - Backport new features for systemd-networkd (#20743, #20472, #20477, #20484)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-3
changelog:
  - Add pam_namespace to systemd-user pam config (rhbz#2053098)
  - Drop 20-grubby.install plugin for kernel-install (rhbz#2033646)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-4
changelog:
  - Drop scriptlet for handling nobody user upgrades from Fedora <28
  - Specify owner of /var/log/journal as root in the rpm listing (#2018913)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-5
changelog:
  - Move part of %post scriptlet for resolved to %posttrans (#2018913)
  - Specify owner of utmp/wtmp/btmp/lastlog as root in the rpm listing


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.1
changelog:
  - New release for v250
  - Sync latest changes from Fedora rawhide
  - Use source archives from https://pagure.io/centos-sig-hyperscale/systemd
    instead of github. All Hyperscale patches have moved to pagure
  - Added llvm-toolset to BuildRequires (for llvm-strip) to make build succeed
  - Enable p11kit and pwquality options in the systemd build


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.3
changelog:
  - Move systemd-network-generator and networkd man pages to networkd package to
    avoid conflicts with systemd-extras from EPEL


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.4
changelog:
  - Make sure our packages override the corresponding backports from EPEL.
  - Modify the networkd fix from the previous release so that it can be merged
    into the c9s branch.


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.6
changelog:
  - Fixed bug in networkd changes to split-files.py that caused the
    /etc/systemd/network to get moved to the networkd package (which we don't
    want because that's where link files for udev are also stored).


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.7
changelog:
  - Backported https://github.com/systemd/systemd/pull/23254 and
    https://github.com/systemd/systemd/pull/23205
  - Move more files to the networkd package


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251-1
changelog:
  - Latest upstream release, for details see
    https://raw.githubusercontent.com/systemd/systemd/v251/NEWS.
  - Fixes for #2071034, #2084955, #2086166.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251.1-2
changelog:
  - Supress errors from useradd/groupadd (#2090129)
  - Drop "v" from the version tag, add tilde back
  - The tag for shared-libraries is reintroduced (#1906010)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251.2-1
changelog:
  - A bunch of man page fixes, a few memory-access correctness fixes,
    remove excessive messages to utmp sessions, suppress messages about
    bpf setup in the user manager (#2084955)


author: Neal Gompa <ngompa@fedoraproject.org> - 251.4-53
changelog:
  - Set compile-time fallback hostname to "localhost"
    https://fedoraproject.org/wiki/Changes/FallbackHostname


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.6
changelog:
  - Bump release for 252.4
  - Sync from rawhide
  - Build with libqrencode
  - Build with libfido2
  - Build with homed/userdb
  - Drop pam config directory override
  - Use python3dist() where applicable
  - Drop llvm-toolset in favor of having systemd use bpftool gen object
  - Add back standalone binary packages


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.11
changelog:
  - Backport fixes for journald crashes and bad behavior when dealing with
    corrupted journals.
  - Fix changelog date


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.12
changelog:
  - Remove selinux bcond in favor of boolean dependency on selinux-policy so that
    systemd-selinux is only installed if selinux-policy is installed
  - Add selinux file contexts for /efi
  - Remove policycoreutils-python-utils dependency from systemd-selinux


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Karel Zak <kzak@redhat.com> 2.32.1-23
changelog:
  - fix #1826251 - remove MD metadata 0.90 based tests from util-linux CI
  - fix #1812576 - RFE: Bitlocker detection for RHEL 8.3
  - fix #1817726 - add libblkid BLOCK_SIZE
  - fix #1803753 - RHEL-8: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
  - fix #1812118 - mount -a always tries to mount smb3 share subdir despite being already mounted
  - fix #1824727 - util-linux: Include python3-libmount package in the release
  - fix #1829245 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir


author: Davide Cavalca <dcavalca@fb.com> 2.32.1-24.fb1
changelog:
  - Facebook rebuild
  - Build against more recent kernel headers to properly support new
    BPF capabilities


author: Karel Zak <kzak@redhat.com> 2.32.1-25
changelog:
  - fix #1884194 - RHEL-8: chrt command does not support the -R option
  - fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
  - fix #1861670 - lsblk can not show serial information for virtio disk
  - fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
  - fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
  - fix #1883056 - lscpu support for Fujitsu A64FX
  - fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM


author: Anita Zhang <anitazha@redhat.com> 2.32.1-27.1
changelog:
  - Backport https://github.com/karelzak/util-linux/commit/89f95425746e0371c033260c2bc0ef176eba6a37
    for setpriv --reset-env support
  - Remove FB kernel headers BuildRequires since RH kernel has them


author: Davide Cavalca <dcavalca@centosproject.org> 2.32.1-27.4
changelog:
  - Backport three losetup upstream fixes:
    https://github.com/karelzak/util-linux/commit/3ff6fb802de1efafbd90af228f91461691ac190c
    https://github.com/karelzak/util-linux/commit/75cd5e2f281cec16c7da49b65c0f3cadd51749b8
    https://github.com/karelzak/util-linux/commit/3e03cb680668e4d47286bc7e6ab43e47bb84c989


author: Karel Zak <kzak@redhat.com> 2.32.1-29
changelog:
  - fix #1988955 - script command continues without stopping.
  - fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
  - fix #2011602 - logger from util-linux incorrectly handles long messages
  - fix #1916151 - [RFE] spread fstrim.timer across time
  - fix #1894192 - Update or backport setpriv --pdeathsig
  - fix #2026511 - blkid fails to complete when targeting  non-block devices


author: Karel Zak <kzak@redhat.com> 2.32.1-31
changelog:
  - improve #2026511 fix - blkid fails to complete when targeting non-block devices
  - fix #1950187 - Ambient capabilities failed to applied to non-root user


author: Karel Zak <kzak@redhat.com> 2.32.1-36
changelog:
  - fix #2060030 - Please backport patches for atari partition detection to RHEL 8
  - fix #2069187 - Internal testsuite for lscpu failed on aarch64
  - fix #2093166 - lslogins reports incorrect "Password is locked" status
  - fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
  - fix #2044592 - Move /var/log/lastlog ownership to systemd


author: Karel Zak <kzak@redhat.com> 2.32.1-40
changelog:
  - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2142496 - update upstream tests
  - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - fix #2160321 - [last] ut->ut_user is not null terminated


author: Mark Wielaard <mjw@fedoraproject.org>
changelog:
  - Add valgrind-3.18.1-ppc64-cmov.patch
  - Add valgrind-3.18.1-arm64-atomics-rdm.patch
  - Add valgrind-3.18.1-rust-demangle-suffix.patch


author: Michal Ruprich <mruprich@redhat.com> - 1:3.6.0-1
changelog:
  - New version 3.6.0
  - Fix for CVE-2021-39920, CVE-2021-39921, CVE-2021-39922, CVE-2021-39923, CVE-2021-39924, CVE-2021-39925, CVE-2021-39926, CVE-2021-39928, CVE-2021-39929


author: Michal Ruprich <mruprich@redhat.com> - 1:3.6.1-1
changelog:
  - New version 3.6.1
  - Fix for CVE-2021-4181, CVE-2021-4182, CVE-2021-4183, CVE-2021-4184, CVE-2021-4185, CVE-2021-4190


author: Michal Ruprich <mruprich@redhat.com> - 1:3.6.2-1
changelog:
  - New version 3.6.2
  - Fix for CVE-2022-0581, CVE-2022-0582, CVE-2022-0583, CVE-2022-0585, CVE-2022-0586


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.5.1-2
changelog:
  - Disable amd64 assembly on non-intel architectures (#2035802):
    this should avoid the issue where an executable stack is created.


