# changelog

author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Michal Ruprich <mruprich@redhat.com> - 1.5.0-12
changelog:
  - Removed clean section
  - Resolves: #1589860 - Update GeoIP legacy databases
  - Resolves: #1409060 -  Missing symlink at the GeoIP-update package


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.6-3
changelog:
  - Sync with the RHEL 7
  - Add Dell WD15/WD19 Dock to USB-Audio.conf and create UCM configs
  - Resolves: rhbz#1664247


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.0.0-5.20180925gitd0076f5
changelog:
  - Update to commit d0076f507a6027455540e2e4f25f84ca38803e07
  - Set CONFIG_LOWBITDEPTH to 1
  - Fix #1632658


author: Robert-André Mauchin <zebob.m@gmail.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - Close: rhbz#1954337
  - Security fix for CVE-2021-30473
  - Fix: rhbz#1961375
  - Fix: rhbz#1961376
  - Security fix for CVE-2021-30475
  - Fix: rhbz#1968017
  - Fix: rhbz#1968018


author: Frediano Ziglio <freddy77@angelfire.com>
changelog:
  - remove dependency from freetds-unixodbc
  - fix field name (Copyright instead of License)
  - updated URL


author: Alex71 <nyrk71@gmail.com> 2.1.0-2
changelog:
  - put libhpdf.so in the devel package and libhpdf-2.1.0.so in the main one
  - removed duplicated README and CHANGES from devel package
  - fixed "E: empty-debuginfo-package" with --enable-debug flag in configure
  - removed INSTALL file
  - added demo/ directory in doc (devel only) as doc


author: Brian Aker <brian@tangent.org> - 1.0.8
changelog:
  * Fri Jan  8 2010 Brian Aker <brian@tangent.org> - 0.37
  - Modified to be explicit in install include files.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Remi Collet <remi@remirepo.net> - 1.3.2-1
changelog:
  - update to 1.3.2
  - drop multilib header hack
  - change URL to https://libzip.org/
  - test suite now ok on all arch


author: Sergey Kokhan <skokhan@cloudlinux.com> - 5.3.7-4
changelog:
  - ALMODP-121: Removed files with 1667 uid
  - ALMODP-120: fix httpd24-alt-mod-passenger spec for new httpd24-httpd


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 5.3.7-6
changelog:
  - ALMODP-134: Fix write application custom passenger log to user's tmp under cagefs
  - ALMODP-135: Deleted writing warning to main apache log when using user's custom log


author: Sergey Kokhan <skokhan@cloudlinux.com> - 5.3.7-14
changelog:
  - ALMODP-143: httpd24-alt-mod-passenger installation paths for mod_passenger.so and mod_passenger.conf changed


author: Matus Honek <mhonek@redhat.com> - 2.4.46-6
changelog:
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
  - Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)


author: Tomas Hoger <thoger@redhat.com> - 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
    caused by "a character class containing a very large number of
    characters with codepoints greater than 255 (in UTF-8 mode)"
    CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: Lubomir Rintel <lkundrak@v3.sk> - 7.8-1
changelog:
  - Update to 7.8, drop upstreamed patches
  - Fix destination of documentation (#427763)
  - Use buildroot macro consistently
  - Separate the static library, as per current Guidelines
  - Satisfy rpmlint


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 7.4.21-3
changelog:
  - ALTPHP-1154: Fix libxml requires
  - ALTPHP-1156: Get rid of manipulations with enabling extensions (mysqli.so) in default.ini


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.10.3-1
changelog:
  - update PEAR to 1.10.3
  - update ArchiveTar to 1.4.2
  - update Structures Graph to 1.1.1
  - update XML_Util to 1.4.2
  - update Console_Getopt to 1.4.1


author: Sergey Kozhekin <skozhekin@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-6
changelog:
  - fixes for Sentry events CLOS-SSA-N, CLOS-SSA-C, CLOS-SSA-D
  - XRAY-117: track current date in storage
  - XRAY-120: SSA ClickHouse reporting
  - XRAY-119: SSA e-mail reporting
  - XRAY-118: selective ssa-agent restarts


author: Alexandr Demeshko <ademeshko@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-7
changelog:
  - XRAY-139: catch RetryErrors in StatSender
  - XRAY-127: SSA tests added
  - XRAY-137: URI escaping added


author: Sergey Kozhekin <skozhekin@cloudlinux.com> - 0.1-8
changelog:
  - XRAY-150: The approach to obtaining the current IP address has been changed
  - XRAY-162: Adding "clos_ssa.ini" for unsupported phps excluded
  - XRAY-216: Support ea-phpXY on CloudLinuxOS 8 (cPanel) has been added


author: Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-9
changelog:
  - XRAY-248: new mechanism of retrieving FROM and TO addressed for email reporting
  - XRAY-247: new style of SSA email reports
  - XRAY-246: set two-digit precision for 'Average duration' field
  - XRAY-237, XRAY-245: SSA adopted for CloudLinux Solo edition


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> - 0.1-11

changelog:
  - XRAY-256: hide unused settings for Cloudlinux Solo edition
  - Fix default package Provides overriding


author: Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.3-1
changelog:
  - XRAY-158: X-RAY-63 Sentry issue fixed (AttributeError: 'NoneType' object has no attribute 'task_id')
  - XRAY-160: number of running tasks restriction
  - XRAY-154: xray-user-agent management commands added
  - XRAY-155: update url with scheme if it is missing
  - XRAY-156: added jwt token check before manager init
  - XRAY-146: cli API added
  - XRAY-145: X-Ray User Manager


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com> - 0.3-2
changelog:
  - XRAY-185: calculate throttling fact with threshold in ms
  - XRAY-181: removed max limit for request_ids
  - XRAY-177: libcurl dependency added
  - XRAY-100: throttling checks on Agent's side
  - XRAY-159: build xray.so for cPanel CL8
  - XRAY-170: processing init request for getting throttling of request added


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> - 0.3-3
changelog:
  - XRAY-212: X-Ray integration script simplified
  - XRAY-186: changed location for xray integration script, added panel_info check
  - XRAY-186: custom panels support added
  - XRAY-180: autostart manipulations added for xray-user-agent
  - XRAY-180: Fixed init.d scripts for agent and user agent
  - XRAY-210: The approach to obtaining the current IP address has been changed


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> - 0.3-4
changelog:
  - XRAY-209: incorrect PHP ini path detection for LSPHPX.Y-alt-php handlers on Plesk fixed
  - XRAY-214: FPM services reload restriction added in X-Ray End User plugin
  - XRAY-213: X-Ray integration transferred to public_cp_vendors_api v1.2


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> - 0.3-6
changelog:
  - XRAY-260: nginx cache detection added in cloudlinux-xray-user-manager
  - XRAY-239: add copyrights to x-ray
  - XRAY-233: disable/restore nginx cache for user during tracing


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> - 0.3-7
changelog:
  - XRAY-201: ignore FPM settings if LiteSpeed is running on cPanel
  - XRAY-254: php80 support added
  - Fix default package Provides overriding
  - XRAY-270: schedstats processing in X-Ray agent
  - XRAY-270: throttling thresholds added
  - XRAY-267: CPU and IO throttling info added to X-Ray extension


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> - 0.3-8
changelog:
  - XRAY-113: URI len trimmed
  - XRAY-275: manager module turned into package
  - XRAY-276: stop tracing task even if domain does not exist or ini file is corrupted
  - XRAY-258: added suppport for php.d.location=selector setting
  - XRAY-277: IO and CPU shared throttling threshold added


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> - 0.3-9
changelog:
  - XRAY-285: xray.tasks directive value wrapped into double quotes
  - XRAY-293: Skip throttling metrics calculation in case of xray.tasks absence


author:
  Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> - 0.3-10

changelog:
  - XRAY-318: drop privileges upon ini file writes
  - XRAY-101: Added check of the subdomain handler
  - XRAY-304: arginfo added


author: Daria Kavchuk <dkavchuk@cloudlinux.com> Sergey Kokhan <skokhan@cloudlinux.com> - 0.2-2
changelog:
  - XRAY-124: DirectAdmin domain aliases added
  - XRAY-128: Fixed tracing taskid resolving
  - Enhancements for subprocess calls


author: Daria Kavchuk <dkavchuk@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> - 0.2-3
changelog:
  - XRAY-147: fix for alternative format of DA pointer files
  - XRAY-136: process errors during API calls
  - XRAY-142: json escaping optimised
  - XRAY-141: logging reconfigured
  - XRAY-140: fix DA options resolving
  - XRAY-134: read DA config files in proper encoding
  - XRAY-132: fix resolving version in case of FPM (cPanel)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 4.4.9-107
changelog:
  - Fixed bug #79330: shell_exec() silently truncates after a null byte
  - Fixed bug #79465: OOB Read in urldecode() (CVE-2020-7067)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 4.4.9-109
changelog:
  - Fixed bug #78875: Long variables cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fixed bug #78876: Long variables in multipart/form-data cause OOM and temp files are not cleaned (CVE-2019-11048)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 4.4.9-113
changelog:
  - Fix bug #79699: PHP parses encoded cookie names so malicious `__Host-` cookies can be sent (CVE-2020-7070)


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.1.6-147
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-firebird


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-3
changelog:
  - extension Auth_SASL updated from 1.0.6 to 1.1.0
  - extension Mail updated from 1.2.0 to 1.4.1
  - extension Mail_Mime updated from 1.8.9 to 1.10.1
  - extension Net_SMTP updated from 1.6.2 to 1.8.0
  - extension Mail_mimeDecode updated from 1.5.5 to 1.5.6
  - extension Net_Socket updated from 1.0.24 to 1.2.2
  - extension Net_Sieve 1.4.1 added


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-10
changelog:
  - move sources for all alt-php to single git project
  - extension File_MARC 1.2.0 added
  - extension Structures_LinkedList 0.2.2 added


author: Sergey Fokin <sfokin@cloudlinux.com> 1-12
changelog:
  - update File_MARC to 1.3.0
  - update Mail_Mime to 1.10.2
  - update Net_IDNA2 to 0.2.0
  - update Net_SMTP to 1.8.1
  - update Net_Sieve to 1.4.4


author: Daniil Leonov <dleonov@cloudlinux.com> - 5.2.17-175
changelog:
  - Fix bug #73809: Phar Zip parse crash - mmap fail
  - Fix bug #80366: Potential issue in ext/standard/iptc.c: Return Value Not Checked


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.2.17-178
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-firebird and alt-php-sqlite


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.2.17-182
changelog:
  - ALTPHP-1164: Update hardened php
  - ALTPHP-1154: Fix libxml requires
  - ALTPHP-1156: Get rid of manipulations with enabling extensions (mysqli.so) in default.ini


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.3.29-141
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-sqlite, alt-php-mysqlnd and alt-php-firebird


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.1.2-1
changelog:
  - Updated to upstream version 2.1.2
  - PHP minimum version 5.3.3 instead of 5.3.2
  - Added PEAR package.xml modifications
  - Added patch for tests' bootstrap.php
  - Added tests (%check)


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.4.45-122
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-mysqlnd and alt-php-firebird


author: Eduard Abdullin <eabdullin@cloudlinux.com> 1-127
changelog:
  - ALTPHP-1195: Updated alt-ImageMagick require to 7.1.0 version
  - ALTPHP-1188: Update imagick to 3.5.1


author: Daniil Leonov <dleonov@cloudlinux.com> - 7.0.33-51
changelog:
  - Fix Bug #73809: Phar Zip parse crash - mmap fail
  - Fix Bug #77322: PharData::addEmptyDir('/') Possible integer overflow
  - Fix Bug #77961: Slow reqursive functions with MySQL
  - Fix Bug #80366: Potential issue in ext/standard/iptc.c: Return Value Not Checked
  - Fix Bug #80411: References to null-serialized object break serialize()


author: Daniil Leonov <dleonov@cloudlinux.com> - 7.0.33-54
changelog:
  - Fix bug #80523: Bogus parse error on >4GB source code
  - Fix bug #80672: Null Dereference in SoapClient. (CVE-2021-21702)


author: Ivan Danilov <idanilov@cloudlinux.com> - 1-36
changelog:
  - ALTPHP-1023: update tideways to 5.0.4
  - ALTPHP-1027: update igbinary to 3.2.1
  - ALTPHP-1095: Add memcache and support of igbinary in memcached


author: Eduard Abdullin <eabdullin@cloudlinux.com> 1-24
changelog:
  - ALTPHP-1195: Updated alt-ImageMagick require to 7.1.0 version
  - ALTPHP-1188: Update imagick to 3.5.1
  - ALTPHP-1197: Added cyrus-sasl-plain to requires


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 1-6
changelog:
  - Update dbase to 7.1.0RC2
  - Add gmagick-2.0.6RC1
  - Add gnupg-1.5.0RC2(only CL7)
  - Add grpc-1.36.0
  - Add igbinary-3.2.1
  - Add mongodb-1.9.0
  - Add oauth-2.0.7
  - Add oci8-3.0.1
  - Add sqlsrv- & pdo_sqlsrv- -5.9.0
  - Add swoole-4.6.4
  - Add trader-0.5.1
  - Add uploadprogress 1.1.3
  - Add xdebug 3.0.3
  - Add yaml to 2.2.1


author: Ivan Danilov <idanilov@cloudlinux.com> - 1-8
changelog:
  - ALTPHP-1023: update tideways to 5.0.4
  - ALTPHP-1095: Add memcache and support of igbinary in memcached


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.21-1
changelog:
  - update to 9.2.21 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-19.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.22-1
changelog:
  - update to 9.2.22 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-22.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.23-1
changelog:
  - update to 9.2.23 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-23.html


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.1-2
changelog:
  - MODLVE-438: pump kapi version
  - KMODLVE-417: fine-grained options for lve_enter
  - LU-2354: Split liblve.so into liblve and libsecureio


author: Tomas Orsava <torsava@redhat.com> - 1.10.1-3
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory.
  Resolves: rhbz#1306513


author: Charalampos Stratakis <cstratak@redhat.com> - 15.1.0-1
changelog:
  - Rebase to version 15.1.0
  - Disable automatic downloads from pypi on new venv creation
  Resolves: rhbz#1461154


author: Brian C. Lane <bcl@redhat.com> 1.1-3
changelog:
  - Add patch to fix metaclass recursion (upstream bug #25)
    https://bitbucket.org/logilab/astroid/issue/25/runtimeerror-maximum-recursion-depth


author: Brian C. Lane <bcl@redhat.com> 1.3.6-1
changelog:
  - Upstream v1.3.6
  - Fix for python3.4 multiprocessing
    https://bitbucket.org/logilab/pylint/issue/265/


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.1-1
changelog:
  - Updated to 2.2.1
  - Introduced Python 3 subpackage (upstream has merged the codebase)
  - Removed BuildRoot and python_sitelib definition
  - Use python2 macros instead of just python


author: Roman Krompets <rkrompets@cloudlinux.com>, Pavel Mogilnikov <pmogilnikov@cloudlinux.com> 2.2.13-3
changelog:
  - WEB-2113: Implement installation of end-user xray plugin on custom panel
  - PTCLLIB-219 : Fix vendors plugin for users without packages


author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Hasan <haliev@cloudlinux.com> 2.2.18-1

changelog:
  - LU-2291: Fix cl-limits set mysql governor to plesk users with additional accounts
  - PTCLLIB-221: Make vendors_api importable directly


author:
  Pavel <pmogilnikov@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> 3.1.1-1

changelog:
  - PTCLLIB-224: Fix conflicts lve-utils/cllib
  - LU-2373: public methods for detection editions added
  - LU-2352: Renew cl single detection by marker logic according to spec
  - CMT-555: Use traceroute -I or -T for tracing to cm.cloudlinux.com
  - LU-2306: make x-ray enabled by default on CloudLinux Solo
  - LU-2226: implement cloudlinux edition checker


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 3.1.3-2

changelog:
  - LU-2388: Fix hidepid behaviour on CL8
  - LVES-1036: get Swedish characters to work in non-HTML notifications
  - LU-2354: Split liblve.so into liblve and libsecureio


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Pavel Mogilnikov <pmogilnikov@cloudlinux.com>, Pavel <pmogilnikov@cloudlinux.com> 3.1.5-1

changelog:
  - LU-2388: Fix hidepid behaviour on CL8
  - LU-2424 : Add edition field to sentry logging
  - LU-2381 : catch and ignore NoSuchProcess


changelog: - LU-2440: Add nginx webserver detection to statistics
author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.1.6-1


author: Dasha Kavchuk <dkavchuk@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 3.1.7-2
changelog:
  - XRAY-201: added warnings about external usage in docstrings
  - LU-2592 Change default detection type of CL Solo edition


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.1.9-1

changelog:
  - LU-2606 Calculate number of WP sites with object-cache.php/advanced-cache.php enabled
  - PTCLLIB-229: TypeError could be raised in get_cl_version function
  - LU-2249: Create internal doc on how to update/extend CPAPI
  - LU-2479: implement handling of WPOS icon visibility for CL Solo


author: Pavel Negrobov <pnegrobov@cloudlinux.com>, Aleksey Zverev <azverev@cloudlinux.com> 3.2.2-1
changelog:
  - LU-2664: Improve user reload process in CLWPOS daemon
  - PTCLLIB-231: Provide the method to detect number of hosting accounts for Solo and CPanel
  - LU-2726: Handled UnicodeUnicodeDecodeError in is_advanced_cache_enabled()


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Hasan Aliyev <haliev@cloudlinux.com> 3.2.3-1
changelog:
  - LU-2722 Detect CL ROC is enabled
  - LU-2723 Detect Wp-Rocket in cloudlinux-summary
  - PTCLLIB-232: Provide the method to detect number of hosting accounts for Solo and DirectAdmin


author: Dmitry Shibut <dshibut@cloudlinux.com>, Hasan Aliyev <haliev@cloudlinux.com> 3.2.4-1
changelog:
  - LU-2740: Check why -42 responses still present in our stats
  - LU-2686: collect statistics of used php versions for customer's WP sites


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.9.1-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4
  - Bootstrap test running (circular dependency with python-lxml)


author: David Malcolm <dmalcolm@redhat.com> - 1.4.1-6
changelog:
  - remove embedded copy of timezone data, and redirect the dateutil.zoneinfo
  API accordingly
  Resolves: rhbz#559309
  - add a %check, running the upstream selftest suite


author: Antonio Trande <sagitterATfedoraproject.org> - 0.16.0-11
changelog:
  - Prepare SPEC file for deprecation of Python2 on fedora 30+
  - Prepare SPEC file for Python3-modules packaging on epel7


author: Dan Scott <dan@coffeecode.net> - 0.5.0-1
changelog:
  - Update to 0.5.0
  - Add a Python3 build
  - Run unit tests
  - Remove python-setuptools-devel BR per https://fedoraproject.org/wiki/Changes/Remove_Python-setuptools-devel


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.2-1
changelog:
  - Reverted flawed patch for #1051427 (this reintroduces #1052102).
  - Spec cleanup (removed rhel < 7 specific stuff).
  - Update to 2.7.2.
  Resolves: rhbz#1052777


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.3.2-2
changelog:
  - Add patch for issue https://github.com/nose-devs/nose/pull/811,
  which makes tests of python-billiard and python-falcon fail with Python 3.4


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names                                                                               
    (http://seclists.org/oss-sec/2014/q4/655)


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 1.5.6-3
changelog:
  - update to 1.5.6-3                                                                                                                              
  - add triggers


author: Michel Salim <salimma@fedoraproject.org> - 0.4.1-3.1
changelog:
  - Conditionally declare and clean buildroot to support el5
  - Fix declaration of Python macro, and make it apply only to el5


author: Devrim Gündüz <devrim@gunduz.org> 2.5.2-1
changelog:
  - Update to 2.5.2, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/01/07/psycopg-252-released


author: Pavel Raiskup <praiskup@redhat.com> - 2.5.3-1
changelog:
  - rebase to most recent upstream version, per release notes:
    http://www.psycopg.org/psycopg/articles/2014/05/13/psycopg-253-released/


author: Devrim Gündüz <devrim@gunduz.org> 2.5.4-1
changelog:
  - Update to 2.5.4, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/08/30/psycopg-254-released


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.4.28-1
changelog:
  - Update to 1.4.28.
  - Modernize spec file.
  - Apply updates Python packaging guidelines.
  - Mark LICENSE with %license.


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.4.31-1
changelog:
  - Update to 1.4.31.
  - Follow updated Python packaging guidelines.
  - Add Provides tag for bundled apipkg.


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.1.6-1
changelog:
  - update to upstream release 0.1.6
  - update modules to 0.0.4
  - update description
  - add python3-pyasn1 subpackage
  - add versioned Requires for the module subpackages
  - add %check section


author: Karel Klic <kklic@redhat.com> - 7.19.0-6
changelog:
  - Added do_curl_reset-refcount.patch: Fixed reference counting of
    Py_None in reset function
    Resolves: rhbz#624559
  - Added do_curl_reset-reinitialize-handle.patch: Proper
    re-initialization of internal settings in reset function
    Resolves: rhbz#565654


author: John Morris <john@zultron.com> - 6.2.4-7.280svn20130805
changelog:
  - Update to SVN r280 for python3 compatibility
  - Update python-pycxx-6.2.4-setup.py.patch to apply correctly
  - Fix %setup for SVN zipball
  - Add diff extensions to %patch macros
  - Enable python3 pkg by default except for EPEL; see BZ 991342


author: Ralph Bean <rbean@redhat.com> - 1.5.6-4
changelog:
  - Change our conflicts on python-SocksiPy to an obsoletes/provides.
    https://bugzilla.redhat.com/show_bug.cgi?id=1334407


author: Ralph Bean <rbean@redhat.com> - 0.4-3
changelog:
  - Removed clean section.
  - Removed defattr.
  - Removed removing of buildroot in install section.
  - Added removal of egg-info in prep section.
  - Added python3 subpackage.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-7
changelog:
  - Tell setuptools about what version of urllib3 we're unbundling
    for https://github.com/kennethreitz/requests/issues/2816


author: Lumír Balhar <lbalhar@redhat.com> - 1.15.6-3
changelog:
  - Add subpackage for platform-python
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 1.15.6-4
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Kyle VanderBeek <kylev@kylev.com> - 2.0.9-1
changelog:
  - Update to 2.0.9
  - Make sure to require gcc to the speedups get compiled
  - Fix description since we're not "pure" python
  - Change to pypi instead of cheesehop


author: Julien Enselme <jujens@jujens.eu> - 1.1.3-4
changelog:
  - Add pyparsing and python3-pyparsing as requires
  - Patch sources so that this bundled library is not used


author: Ralph Bean <rbean@redhat.com> - 1.15.1-2
changelog:
  - Remove broken symlinks to unbundled python3-six files
    https://bugzilla.redhat.com/show_bug.cgi?id=1295015


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 3.3.6-2.9
changelog:
  - add locked extensions
  - add condition for build without linksafe
  - conflict with lvemanager < 1.0-9.43


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 3.3.6-2.11
changelog:
  - fix for CVE-2016-1000110 HTTProxy attack
  - fix for CVE-2016-0772 python: smtplib StartTLS stripping attack
    rise an error when STARTTLS fails (upstream patch)
  - fix for CVE-2016-5699 python: http protocol steam injection attack
    disabled HTTP header injections in http.client (upstream patch)


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-8
changelog:
  - Remove the python-setuptools-devel Virtual Provides as per this Fedora 21
    Change: http://fedoraproject.org/wiki/Changes/Remove_Python-setuptools-devel


author: Orion Poplawski - 0.23.5-1
changelog:
  - Update to 0.23.5
  - Macro usage cleanup
  - Fix license tag
  - Fix line endings
  - Remove unneeded shbangs


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.11.6-1
changelog:
  - upstream release 0.11.6
  - add python3 subpackage. resolves rhbz#949240
  - spec file patch from Haïkel Guémar <hguemar@fedoraproject.org>


author: Adam Williamson <awilliam@redhat.com> - 1.0.0-4
changelog:
  - python3 build only for Fedora (no python3 in RHEL6 or 7)
  - provide python2-cached_property
  - guard against #license not being available
  - only run tests on F>=22 (tox is too old on everything else)


author: Adam Williamson <awilliam@redhat.com> - 1.2.0-1
changelog:
  - new upstream release 1.2.0 (refactoring, bug fixes)
  - patch out non-ASCII characters in HISTORY.rst (breaks py3 build in koji)


author: Adam Williamson <awilliam@redhat.com> - 1.3.0-1
changelog:
  - new release 1.3.0, drop patch (merged upstream)
  - switch to python2-foo / python3-foo package naming


author: Adam Williamson <awilliam@redhat.com> - 1.3.0-2
changelog:
  - try to repair the mess I made of package naming:
  - # both subpackages now use module name not project name
  - # try to ensure all previous names are provided/obsoleted


author: Zbigniew Jędrzejewski-Szmek <zbyszek@bupkis> - 1:2.5.0-1
changelog:
  - Update to latest upstream version
  - The patch to make dateutil.zoneinfo.gettz() use the system database is dropped.
    Upstream recommends using dateutil.tz.gettz() instead.


author: Sergio Pascual <sergiopr@fedoraproject.org> - 0.9.3-2
changelog:
  - New upstream release (0.9.3)
  - Using new python macros
  - Disable failling tests (https://github.com/joblib/joblib/issues/278)


author: Jamie Lennox <jamielennox@gmail.com> - 0.7.0-1
changelog:
  - Update package to new version.
  - Add python2 subpackage for new python packaging guidelines.
  - Redo patch1 to still apply.


author: Eduard Abdullin <eabudllin@cloudlinux.com> - 3.7.11-4
changelog:
  - ALTPYTH-364: Fix build for old system
  - ALTPYTH-381: Added check for cl solo
  - ALTPYTH-380: Added cloudlinux-linksafe to Requires(post)


author: Carl George <carl.george@rackspace.com> - 1.0.1-2
changelog:
  - Remove coverage build dependency
  - Change python3 control macros to a bcond macro
  - Add bcond macro to optionally require explicit python2 names


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
  - New upstream version
  - Added support for python3
  - Included README, COPYING, and CHANGELOG in docs


author: Luke Macken <lmacken@redhat.com> - 2.0.0-1
changelog:
  - The pep8 project has been renamed to pycodestyle
  - Create python2 subpackage
  - Update the source url to use pypi.io
  - Build a man page instead of html docs


author: Luke Macken <lmacken@redhat.com> - 2.0.0-2
changelog:
  - Use the new python setup/build/install macros
  - Remove Obsoletes/Provides for pep8, since it is currently not a drop-in replacement.
    https://bugzilla.redhat.com/show_bug.cgi?id=1342839#c10


author: sebix+novell.com@sebix.at
changelog:
  - update to version 1.0.4
    Add checks for some 3.5+ only syntax (async/await and the @ operator) (#41)


author: Remi Collet <remi@remirepo.net> - 6.0.9-3
changelog:
  - move configuration in /etc/redis per upstream recommendation
    see https://github.com/redis/redis/issues/8051


author: Remi Collet <remi@remirepo.net> - 6.2.0-1
changelog:
  - Redis 6.2.0 GA - Released Tue Feb 22 14:00:00 IST 2021
  - Upgrade urgency: SECURITY if you use 32bit build of redis,
    MODERATE if you used earlier versions of Redis 6.2, LOW otherwise


author: Remi Collet <remi@remirepo.net> - 6.2.2-1
changelog:
  - Redis 6.2.2 - Released Mon April 19 19:00:00 IST 2021
  - Upgrade urgency: HIGH, if you're using ACL and pub/sub,
    CONFIG REWRITE, or suffering from performance regression.


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 2.0.0-17
changelog:
  - add locked_extensions
  - add trigers to subpackages of rubygem
  - add condition for build with linksafe
  - conflicts with lvemanager < 1.0-9.43


author: Jan Stanek <jstanek@redhat.com> - 3.7.16.2-1
changelog:
  - update to 3.7.16.2 (http://www.sqlite.org/releaselog/3_7_16_2.html)
  - add support for aarch64 (rerunning autoconf) (#926568)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6
changelog:
  - Resolves: #556398
  - Directly included relevant patches, scripts and man pages from Debian
  - Removed rpath
  - rpmlint is silent now


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6.1
changelog:
  - Fixed CVE-2010-2642, CVE-2011-0433, CVE-2011-0764, CVE-2011-1552, CVE-2011-1553, CVE-2011-1554
    Resolves: rhbz#772900


author: Martin Kolman <mkolman@redhat.com> - 33.16.4.6-1
changelog:
  - Initialize librepo logger (pkratoch)
    Resolves: rhbz#1908286
  - Add RPM tests support for owners on rhel-8 (jkonecny)
    Related: rhbz#1885635
  - Use latests RHEL-8 buildroot in containers (jkonecny)
    Related: rhbz#1885635
  - Implement rpm-tests execution in the container (jkonecny)
    Related: rhbz#1885635


author: Martin Kolman <mkolman@redhat.com> - 33.16.4.7-1
changelog:
  - Allow to disable the Security module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Services module (vponcova)
    Resolves: rhbz#1913689
  - Support should_run for standalone GUI spokes (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Localization module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Timezone module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the network installation (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Users module (vponcova)
    Resolves: rhbz#1913689
  - Always show pykickstart parse warnings (vslavik)
    Resolves: rhbz#1897663


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.9-1
changelog:
  - Change warning messages of missing prefix for RH products (jkonecny)
    Resolves: rhbz#1897657
  - Do not use cache for container build (jkonecny)
    Related: rhbz#1885635
  - Fix missing inst. prefixes for bootloader options in documentation (jkonecny)
    Related: rhbz#1897657
  - Fix show missing inst. prefix warning appropriately (jkonencny)
    Related: rhbz#1897657
  - Remove docs where we tell users that inst. prefix is not required (jkonecny)
    Related: rhbz#1897657
  - Print warning for boot options without inst. prefix (jkonecny)
    Related: rhbz#1897657
  - Add missing dracut commands as missing inst. prefix warning (jkonecny)
    Related: rhbz#1897657
  - Enable warning when inst. prefix is not used (jkonecny)
    Related: rhbz#1897657


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.10-1
changelog:
  - Mark the rhsm and syspurpose kickstart commands as useless (vponcova)
    Resolves: rhbz#1921787
  - Fix getting kernel version list for liveimg (rvykydal)
    Resolves: rhbz#1919463


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.11-1
changelog:
  - Take dnf substitutions from installer environment configuration (rvykydal)
    Resolves: rhbz#1920735
  - Fix exclude arguments of tar payload extracting. (rvykydal)
    Resolves: rhbz#1924118


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.14-1
changelog:
  - Fix crash in NTP servers GUI dialog on late network configuration (rvykydal)
    Resolves: rhbz#1938168


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.15-1
changelog:
  - network: clone connections from intramfs to persistent config (rvykydal)
    Resolves: rhbz#1910438
  - network: match also connections named by MAC created by NM in initramfs
    (rvykydal)
    Related: rhbz#1910438
  - network: do not reset ipv6.addr-gen-mode in tui network configuration
    (rvykydal)
    Related: rhbz#1873021
  - network: set addr-gen-mode of Anaconda default connections to eui64
    (rvykydal)
    Related: rhbz#1873021
  - network: default to addr-gen-mode eui64 (rvykydal)
    Resolves: rhbz#1873021


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 20.1102-1
changelog:
  - Fixed normalization for versions (DEF-14069)
  - Changed behavior for non-existent directories (DEF-14117)
  - Fixed bug in read directories by function file_get_contents (DEF-14047)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 20.1117-1
changelog:
  - Fixed output on empty input (DEF-14770)
  - Added real_path field for sqlite report (DEF-14365)
  - Added uid field for slite report (DEF-13657)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 21.0908-1
changelog:
  - Fixed script for update AppVersionDetector package (DEF-17661)
  - Fixed return code (DEF-17662)
  - Added detection for phpmyadmin (DEF-10502)
  - Added detection for Modx, IPB, PHPBB3, OsCommerce and Bitrix (DEF-10501)
  - Added PHP 8.0 support (DEF-17446)
  - Changed EULA (DEF-17426)


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.6.3-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Milan Broz <gmazyland@gmail.com> - 20171227-1
changelog:
  - Update to version 20171227 (soname increase).
  - Temporarily keep libargon2.so.0.
  - Fix a crash if running under memory pressure.


author: Pino Toscano <ptoscano@redhat.com> - 1.10.1-3
changelog:
  - Backport some upstream commits to fix few memory leaks, and potential
    memory issues (RHBZ#1602446)


author: Pino Toscano <ptoscano@redhat.com> - 1.10.1-4
changelog:
  - Grub: better handle invalid grub.conf files (RHBZ#1649262)
  - Sudoers: handle "always_query_group_plugin" option (RHBZ#1649299)


author: Pino Toscano <ptoscano@redhat.com> - 1.10.1-6
changelog:
  - Semanage: new lens (RHBZ#1652840)
  - Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
    (RHBZ#1653768)


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-5
changelog:
  - Remove dependency on an exotic testing package python-freezegun which we
    don't have capacity to ship in RHEL8
  - Run tests in pytest (as declared in BuildRequires) instead of unittest


author: Piotr Popieluch <piotr1212@gmail.com> - 0.4.0-4.20160219git0360811
changelog:
  - Update to latest git snapshot
  - Enable tests
  - Remove obsoleted el5 macros
  - Move license to %license
  - Add (empty) %build section
  - Add CONDUCT.md to %doc
  - Set correct interpreter in scripts


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.5.1.el8_4]
changelog:
  - gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
  - gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
  - gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
  - gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
  - gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
  - gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
  - gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
  - gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
  - gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
  - gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
  - gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
  - CI: Disable result checking for realtime check (Veronika Kabatova)
  - CI: Explicitly disable result checking for private CI (Veronika Kabatova)
  - CI: Rename variable (Veronika Kabatova)
  - CI: Update builder containers (Veronika Kabatova)


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.6.1.el8_4]
changelog:
  - openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
  - net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
  - net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
  - net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
  - redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
  - certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
  - integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
  - certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
  - certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
  - certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
  - net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
  - dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
  - scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
  - scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.7.1.el8_4]
changelog:
  - net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
  - net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
  - net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
  - net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
  - net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
  - flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
  - Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
  - sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
  - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
  - Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
  - x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
  - x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
  - x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
  - x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
  - x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
  - net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.8.1.el8_4]
changelog:
  - iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
  - ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
  - i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
  - redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
  - redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
  - netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
  - Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
  - Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
  - Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
  - ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
  - fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
  - net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
  - netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.9.1.el8_4]
changelog:
  - ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
  - CI: Merge configuration (Veronika Kabatova)
  - igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
  - igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
  - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
  - scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.10.1.el8_4]
changelog:
  - igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
  - bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
  - scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
  - i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.10.2.el8_4]
changelog:
  - seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}


author: Denis Kirjanov <dkirjanov@cloudlinux.com> 4.18.0-305.10.2.2.el8_4] {CVE-2020-27170}
changelog:
  - CLKRN-726: CVE-2020-27170 bpf: Add sanity check for upper ptr_limit
  - CLKRN-726: CVE-2020-27170: bpf: Simplify alu_limit masking for pointer arithmetic
  - CLKRN-726: CVE-2020-27170: bpf: Fix off-by-one for area size in creating mask to left
  - CLKRN-726: CVE-2020-27170: bpf: Prohibit alu ops for pointer types not defining ptr_limit


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.11.1.el8_4]
changelog:
  - SUNRPC: Handle major timeout in xprt_adjust_timeout() (Scott Mayhew) [1980613 1979070]
  - net/mlx5e: Disable TLS device offload in kdump mode (Alaa Hleihel) [1969909 1946647]
  - net/mlx5e: Disable TX MPWQE in kdump mode (Alaa Hleihel) [1969909 1946647]
  - drm/i915: Add an encoder hook to sanitize its state during init/resume (Imre Deak) [1981250 1961122]
  - netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980500 1980501] {CVE-2021-22555}
  - Bluetooth: btusb: Fix the autosuspend enable and disable (Gopal Tiwari) [1972564 1927375]
  - cifs: handle empty list of targets in cifs_reconnect() (Ronnie Sahlberg) [1973637 1952263]
  - tick/nohz: Update idle_exittime on actual idle exit (Phil Auld) [1978710 1962632]
  - tick/nohz: Remove superflous check for CONFIG_VIRT_CPU_ACCOUNTING_NATIVE (Phil Auld) [1978710 1962632]
  - tick/nohz: Conditionally restart tick on idle exit (Phil Auld) [1978710 1962632]
  - can: bcm: delay release of struct bcm_op after synchronize_rcu() (Hangbin Liu) [1975058 1975059]
  - redhat/configs: Re-enable dptf_power module (Prarit Bhargava) [1968381 1962349]
  - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975514 1975515] {CVE-2021-22543}
  - seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.12.1.el8_4]
changelog:
  - Revert "nvme-pci: remove last_sq_tail" (Gopal Tiwari) [1965415 1921591]
  - tc-testing: add test for ct DNAT tuple collision (Marcelo Ricardo Leitner) [1982494 1964578]
  - tc-testing: add support for sending various scapy packets (Marcelo Ricardo Leitner) [1982494 1964578]
  - tc-testing: fix list handling (Marcelo Ricardo Leitner) [1982494 1964578]
  - net/sched: act_ct: handle DNAT tuple collision (Marcelo Ricardo Leitner) [1982494 1964578]
  - mm/memcg: Relocate tcpmem to below memory in struct mem_cgroup (Waiman Long) [1980314 1959772]
  - mm/memcg: optimize user context object stock access (Waiman Long) [1980314 1959772]
  - mm/memcg: improve refill_obj_stock() performance (Waiman Long) [1980314 1959772]
  - mm/memcg: cache vmstat data in percpu memcg_stock_pcp (Waiman Long) [1980314 1959772]
  - mm/memcg: move mod_objcg_state() to memcontrol.c (Waiman Long) [1980314 1959772]
  - mm: memcontrol: use obj_cgroup APIs to charge kmem pages (Waiman Long) [1980314 1959772]
  - mm: memcontrol: change ug->dummy_page only if memcg changed (Waiman Long) [1980314 1959772]
  - mm: memcontrol: directly access page->memcg_data in mm/page_alloc.c (Waiman Long) [1980314 1959772]
  - mm: memcontrol: introduce obj_cgroup_{un}charge_pages (Waiman Long) [1980314 1959772]
  - mm: memcontrol: slab: fix obtain a reference to a freeing memcg (Waiman Long) [1980314 1959772]
  - mm: move lruvec stats update functions to vmstat.h (Waiman Long) [1980314 1959772]
  - mm: memcg/slab: rename *_lruvec_slab_state to *_lruvec_kmem_state (Waiman Long) [1980314 1959772]
  - mm: Convert page kmemcg type to a page memcg flag (Waiman Long) [1980314 1959772]
  - mm: Introduce page memcg flags (Waiman Long) [1980314 1959772]
  - mm: memcontrol/slab: Use helpers to access slab page's memcg_data (Waiman Long) [1980314 1959772]
  - mm: memcontrol: Use helpers to read page's memcg data (Waiman Long) [1980314 1959772]
  - mm/page_alloc.c: extract check_[new|free]_page_bad() common part to page_bad_reason() (Waiman Long) [1980314 1959772]
  - mm/page_alloc.c: rename free_pages_check() to check_free_page() (Waiman Long) [1980314 1959772]
  - mm/page_alloc.c: rename free_pages_check_bad() to check_free_page_bad() (Waiman Long) [1980314 1959772]
  - mm/page_alloc.c: bad_flags is not necessary for bad_page() (Waiman Long) [1980314 1959772]
  - mm/page_alloc.c: bad_[reason|flags] is not necessary when PageHWPoison (Waiman Long) [1980314 1959772]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-305.13.1.el8_4]
changelog:
  - xfrm: Fix wraparound in xfrm_policy_addr_delta() (Sabrina Dubroca) [1981840 1951965]
  - VMCI: Release resource if the work is already queued (Cathy Avery) [1982042 1978518]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-305.14.1.el8_4]
changelog:
  - tick/nohz: Kick only _queued_ task whose tick dependency is updated (Waiman Long) [1981336 1922901]
  - tick/nohz: Change signal tick dependency to wake up CPUs of member tasks (Waiman Long) [1981336 1922901]
  - tick/nohz: Only wake up a single target cpu when kicking a task (Waiman Long) [1981336 1922901]
  - tick/nohz: Narrow down noise while setting current task's tick dependency (Waiman Long) [1981336 1922901]
  - mlx5: net: zero-initialize tc skb extension on allocation (Jan Stancek) [1982220 1965418]
  - scsi: qedf: Update the max_id value in host structure (Nilesh Javali) [1989097 1954876]
  - scsi: qla2xxx: Reserve extra IRQ vectors (Nilesh Javali) [1986156 1964834]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.15.1.el8_4]
changelog:
  - sched: Fix data-race in wakeup (Phil Auld) [1987296 1937103]
  - mm/page_alloc: bail out on fatal signal during reclaim/compaction retry attempt (Aaron Tomlin) [1984085 1919765]
  - sunrpc: Avoid a KASAN slab-out-of-bounds bug in xdr_set_page_base() (Benjamin Coddington) [1990404 1969751]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.16.1.el8_4]
changelog:
  - kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent) [1994879 1939133]
  - kernfs: use i_lock to protect concurrent inode updates (Ian Kent) [1994879 1939133]
  - kernfs: switch kernfs to use an rwsem (Ian Kent) [1994879 1939133]
  - kernfs: use VFS negative dentry caching (Ian Kent) [1994879 1939133]
  - kernfs: add a revision to identify directory node changes (Ian Kent) [1994879 1939133]
  - kernfs: move revalidate to be near lookup (Ian Kent) [1994879 1939133]
  - scsi: lpfc: Fix dropped FLOGI during pt2pt discovery recovery (Jan Stancek) [1948608 1923762]
  - net: sched: act_mirred: Reset ct info when mirror/redirect skb (C. Erastus Toe) [1992226 1980532]
  - usb: ehci: Prevent missed ehci interrupts with edge-triggered MSI (Torez Smith) [1993894 1972139]
  - usb: ehci: do not initialise static variables (Torez Smith) [1993894 1972139]
  - usb: host: move EH SINGLE_STEP_SET_FEATURE implementation to core (Torez Smith) [1993894 1972139]
  - USB: ehci: drop workaround for forced irq threading (Torez Smith) [1993894 1972139]
  - usb: ehci: add spurious flag to disable overcurrent checking (Torez Smith) [1993894 1972139]
  - NFS: Only change the cookie verifier if the directory page cache is empty (Benjamin Coddington) [1993895 1982825]
  - NFS: Fix handling of cookie verifier in uncached_readdir() (Benjamin Coddington) [1993895 1982825]
  - nfs: Subsequent READDIR calls should carry non-zero cookieverifier (Benjamin Coddington) [1993895 1982825]
  - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988225 1988226] {CVE-2021-37576}


author: Jan Stancek <jstancek@redhat.com> [4.18.0-305.17.1.el8_4]
changelog:
  - ucounts: Move max_time_namespace according to ucount_type (Alex Gladkov) [1998002 1982954]
  - netfilter: conntrack: remove offload_pickup sysctl again (Florian Westphal) [1995555 1987101]
  - netfilter: flowtable: Set offload timeouts according to proto values (Phil Sutter) [1995554 1979184]
  - netfilter: conntrack: Introduce udp offload timeout configuration (Phil Sutter) [1995554 1979184]
  - netfilter: conntrack: Introduce tcp offload timeout configuration (Phil Sutter) [1995554 1979184]
  - powerpc/64s: Fix crashes when toggling stf barrier (Desnes A. Nunes do Rosario) [1989174 1964484]
  - iavf: fix locking of critical sections (Stefan Assmann) [1997534 1975245]
  - iavf: do not override the adapter state in the watchdog task (Stefan Assmann) [1997534 1975245]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-305.18.1.el8_4]
changelog:
  - mfd: intel-lpss: Use devm_ioremap_uc for MMIO (Steve Best) [1989560 1986715]
  - lib: devres: add a helper function for ioremap_uc (Steve Best) [1989560 1986715]
  - ceph: fix test for whether we can skip read when writing beyond EOF (Jeff Layton) [1996680 1971101]
  - arm64: memory: Add missing brackets to untagged_addr() macro (Chris von Recklinghausen) [1997998 1955809]
  - arm64: tags: Preserve tags for addresses translated via TTBR1 (Chris von Recklinghausen) [1997998 1955809]
  - arm64: entry: Move ct_user_exit before any other exception (Chris von Recklinghausen) [1997998 1955809]
  - arm64: memory: Implement __tag_set() as common function (Chris von Recklinghausen) [1997998 1955809]
  - arm64: mm: Really fix sparse warning in untagged_addr() (Chris von Recklinghausen) [1997998 1955809]
  - arm64: untag user pointers in access_ok and __uaccess_mask_ptr (Chris von Recklinghausen) [1997998 1955809]
  - arm64/mm: fix variable 'tag' set but not used (Chris von Recklinghausen) [1997998 1955809]
  - arm64: entry: SP Alignment Fault doesn't write to FAR_EL1 (Chris von Recklinghausen) [1997998 1955809]
  - arm64: compat: Add separate CP15 trapping hook (Chris von Recklinghausen) [1997998 1955809]
  - arm64: don't restore GPRs when context tracking (Chris von Recklinghausen) [1997998 1955809]
  - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) (Jon Maloy) [1985429 1985430] {CVE-2021-3656}
  - KVM: SVM: add module param to control the #SMI interception (Jon Maloy) [1985429 1985430] {CVE-2021-3656}
  - tty: Don't hold ldisc lock in tty_reopen() if ldisc present (Waiman Long) [1997999 1968271]
  - tty/ldsem: Add lockdep asserts for ldisc_sem (Waiman Long) [1997999 1968271]
  - tty: Simplify tty->count math in tty_reopen() (Waiman Long) [1997999 1968271]
  - tty: Don't block on IO when ldisc change is pending (Waiman Long) [1997999 1968271]
  - tty: Hold tty_ldisc_lock() during tty_reopen() (Waiman Long) [1997999 1968271]
  - tty: Drop tty->count on tty_reopen() failure (Waiman Long) [1997999 1968271]
  - [s390] s390/vtime: fix increased steal time accounting (Claudio Imbrenda) [1988386 1963075]
  - XArray: Fix splitting to non-zero orders (Chris von Recklinghausen) [1997997 1946304]
  - XArray: Fix split documentation (Chris von Recklinghausen) [1997997 1946304]
  - ima: extend boot_aggregate with kernel measurements (Bruno Meneguele) [1997766 1977422]
  - ceph: reduce contention in ceph_check_delayed_caps() (Jeff Layton) [1995862 1953430]
  - ice: Stop processing VF messages during teardown (Ken Cox) [1997538 1986451]
  - iavf: Set RSS LUT and key in reset handle path (Ken Cox) [1997536 1910853]
  - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985412 1985413] {CVE-2021-3653}
  - scsi: ibmvfc: Fix potential race in ibmvfc_wait_for_ops() (Steve Best) [1969792 1941180]
  - [s390] s390/dasd: add missing discipline function (Claudio Imbrenda) [1995206 1981804]
  - serial_core: switch to ->[sg]et_serial() (Artem Savkov) [1993872 1952415]
  - net/mlx5e: Fix mapping of ct_label zero (Jan Stancek) [1983681 1915308]
  - drm/qxl: add lock asserts to qxl_bo_vmap_locked + qxl_bo_vunmap_locked (Lyude Paul) [1992839 1907341]
  - drm/qxl: rework cursor plane (Lyude Paul) [1992839 1907341]
  - drm/qxl: move shadow handling to new qxl_prepare_shadow() (Lyude Paul) [1992839 1907341]
  - drm/qxl: fix monitors object vmap (Lyude Paul) [1992839 1907341]
  - drm/qxl: fix prime vmap (Lyude Paul) [1992839 1907341]
  - drm/qxl: rename qxl_bo_kmap -> qxl_bo_vmap_locked (Lyude Paul) [1992839 1907341]
  - drm/qxl: fix lockdep issue in qxl_alloc_release_reserved (Lyude Paul) [1992839 1907341]
  - drm/qxl: use ttm bo priorities (Lyude Paul) [1992839 1907341]
  - drm/qxl: more fence wait rework (Lyude Paul) [1992839 1907341]
  - drm/qxl: properly handle device init failures (Lyude Paul) [1992839 1907341]
  - drm/qxl: allocate dumb buffers in ram (Lyude Paul) [1992839 1907341]
  - drm/qxl: simplify qxl_fence_wait (Lyude Paul) [1992839 1907341]
  - drm/qxl: properly free qxl releases (Lyude Paul) [1992839 1907341]
  - drm/qxl: handle shadow in primary destroy (Lyude Paul) [1992839 1907341]
  - drm/qxl: properly pin/unpin shadow (Lyude Paul) [1992839 1907341]
  - drm/qxl: release shadow on shutdown (Lyude Paul) [1992839 1907341]
  - drm/qxl: unpin release objects (Lyude Paul) [1992839 1907341]
  - drm/qxl: use drmm_mode_config_init (Lyude Paul) [1992839 1907341]
  - qxl/ttm: drop the unusued no wait flag to reserve function (Lyude Paul) [1992839 1907341]


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-305.19.1.el8_4]
changelog:
  - libceph: allow addrvecs with a single NONE/blank address (Jeff Layton) [1996682 1972278]
  - ice: Only lock to update netdev dev_addr (Michal Schmidt) [2000129 1995868]
  - ice: don't remove netdev->dev_addr from uc sync list (Ken Cox) [2000130 1961018]


author: Anton Volkov <avolkov@cloudlinux.com>, msozin <msozin@cloudlinux.com> 7.1.5-1
changelog:
  - CAG-1087: remove duplicate lines from /etc/cagefs/cagefs.base.home.dirs
  - CAG-1088: correctly generate virt.mp files for users with duplicate uids
  - CAG-1080: fix race in cagefsctl that cause random fails of 900-parallel-remount.sh test


author:
  Anton Volkov <avolkov@cloudlinux.com>, Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 7.1.7-1

changelog:
  - CAG-1101: investigate and fix error of "su - user" command
  - CAG-1100: process symlinks correctly while creating devices
  - CAG-1094: ldd output parsing is broken on cl 8
  - CAG-1099: Update universal hooks for dnf


author: Pavel Negrobov <pnegrobov@cloudlinux.com>, msozin <msozin@cloudlinux.com> 7.1.9-1
changelog:
  - CAG-1103: Optimize DirectAdmin restore / create users process
  - CAG-1088: correctly generate virt.mp files for users with duplicate uids


author: Alisher Matkurbanov <amatkurbanov@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com> 7.2.1-1
changelog:
  - CAG-1113: Add openlitespeed config support on DA with custombuild
  - CAG-1116: add directories needed for cPanel BoxTrapper to CageFS


author:
  Oleksandr <oshyshatskyi@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com> - 7.3.1-1

changelog:
  - LU-2298: Check spelling and correctness CL licenses in all files of Userspace projects
  - LU-2571: Added lock waiting to cagefsctl hooks
  - CAG-1126: add /usr/bin/mysql_config-64 to CageFS


author: Anton Volkov <avolkov@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 7.4.2-1
changelog:
  - CAG-1121: implement splitted by UID mounts in CageFS
  - LU-2481: added /etc/cagefs/conf.d/wpos.cfg file


changelog: - Added governor support
author:
  Alexandr Demeshko <ademeshko@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com> 10.4.12-1


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 10.4.15-1
changelog:
  - MYSQLG-533: Updated to 10.4.15
  - MYSQLG-523: mysqld init.d symlink added to server package
  - MYSQLG-524: /var/run/mysqld dir added to server package
  - MYSQLG-525: Vendor info fixed in server prein scriptlet
  - MYSQLG-528: mariabackup added to server package


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 10.4.17-2
changelog:
  - MYSQLG-563: libmariadb Provides added to meta-client package
  - MYSQLG-563: libmariadb with symlinks moved into private dir
  - MYSQLG-563: rpm autoreq and autoprov disabled


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 10.5.8-1
changelog:
  - Updated to 10.5.8
  - mysqld init.d symlink added to server package
  - /var/run/mysqld dir added to server package
  - Vendor info fixed in server prein scriptlet
  - mariabackup added to server package
  - mysql(d) systemd service restored
  - log files added to server package
  - libmariadb.so excluded from rpm provides


author: Daria Kavchuk <dkavchuk@cloudlinux.com> 5.5.61-2
changelog:
  - MYSQLG-291: Added systemd service files and scripts
  - Removed part of posttrans scriptlet, which cleaned service files


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 5.5.68-1
changelog:
  - Updated up to 5.5.68
  - MYSQLG-477: governer patch: dropped const attribute for governor_charset_bin


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 8.0.23-3
changelog:
  - MYSQLG-578: Added missed plugins to server package
  - MYSQLG-584: Added conflict with mariadb-connector-c to client package


author: Anton Volkov <avolkov@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 1.0.7-1
changelog:
  - CMT-347: Requires: lve-utils >= 4.2.20-1
  - CMT-354: Move CMT Sentry projects to new CL Sentry-server instance
  - CMT-322: /var/log/node_exporter should not be available for viewing by all users


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.0.8-1

changelog:
  - CMT-408 Increase post/get timeout in endservertools
  - CMT-220: [end-server tools] Add litespeed support to apache collector


author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 1.1.0-1

changelog:
  - CMT-418: fix cl_plus_sender is dead after restarting of node_exporter service
  - CMT-165: [End-server tools] Adapt CM apache collector to DA
  - CMT-308: hide mysql warning while calculating process list count
  - CMT-416: /var/log/node_exporter.log should not be cleared while restart of node_exporter service
  - CMT-400: Improve MySQL collector logging


author: alutsiuk <alutsiuk@cloudlinux.com> 1.1.3-1
changelog:
  - CMT-481: skip broken lsws symlinks while collecting requests metrics
  - CMT-492: fix data aggregation in node exporter collector
  - CMT-464: Investigate required node_exporter metrics missed
  - CMT-476: calculate memAvailable for node exporter metrics on cl6


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, sgevorgyan <sgevorgyan@cloudlinux.com> 1.1.4-1

changelog:
  - CMT-501: Move diskstats filters to python and adapt it for XEN
  - CMT-502 fix getting apache offset from httpd config
  - WEB-2049 Change translation for CM -> create alert


changelog: - Initial release
author:
  Pavel Mogilnikov <pmogilnikov@cloudlinux.com>, Alisher Matkurbanov <amatkurbanov@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.0.4-1


author: Alisher Matkurbanov <amatkurbanov@cloudlinux.com> 1.0.5-1
changelog:
  - LU-2000: Add user info to sentry reports
  - LU-2003: Fix sql query failing with empty database
  - LU-1990: Fix python logger sentry errors duplication
  - LU-1972: Refactor WMT unit-tests for using mocks


author: Alisher Matkurbanov <amatkurbanov@cloudlinux.com>, Pavel <pmogilnikov@cloudlinux.com> 1.0.7-1
changelog:
  - LU-2060: Fix addon and sub-domain names collection in WMT on CPanel
  - LU-1996: Add logging and sentry to python scripts


author:
  Hasan <haliev@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Aleksey Zverev <azverev@cloudlinux.com> 2.0.0-1

changelog:
  - LU-2310: implement wmt for CloudLinux OS Solo
  - LU-2281: Implement WMT notifications: reports & alerts
  - LU-2365: Modify WMT Solo settings (email notifications, ignore list)
  - LU-2429: Split email configuration into default and overridable
  - LU-2431: Fix WMT solo bugs


author:
  Pavel <pmogilnikov@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 2.1.0-1

changelog:
  - LU-2401 : rewrite broken crons
  - LU-2298: Check spelling and correctness CL licenses in all files of Userspace projects
  - LU-2568 Don`t send summary reports if WMT is disabled
  - LU-2442 Disable WMT when Solo license expires
  - LU-2595: Change system_id format in wmt-api-solo --send-clickhouse


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-3.el8
changelog:
  - ci--Removing-net-tools-dependency.patch [bz#1881871]
  - ci--Adding-man-pages-to-Red-Hat-spec-file.patch [bz#1612573]
  - Resolves: bz#1881871
    (Remove net-tools legacy dependency from spec file)
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-4.el8
changelog:
  - ci-Changing-permission-of-cloud-init-generator-to-755.patch [bz#1897528]
  - Resolves: bz#1897528
    (Change permission on ./systemd/cloud-init-generator.tmpl to 755 instead of 771)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-5.el8
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1881462]
  - Resolves: bz#1881462
    ([rhel8][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-6.el8
changelog:
  - ci-Installing-man-pages-in-the-correct-place-with-corre.patch [bz#1612573]
  - ci-Adding-BOOTPROTO-dhcp-to-render-sysconfig-dhcp6-stat.patch [bz#1859695]
  - ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1898943]
  - ci-ssh_util-handle-non-default-AuthorizedKeysFile-confi.patch [bz#1862967]
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)
  - Resolves: bz#1898943
    ([rhel-8]cloud-final.service fails if NetworkManager not installed.)
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-7.el8
changelog:
  - ci-Report-full-specific-version-with-cloud-init-version.patch [bz#1898949]
  - Resolves: bz#1898949
    (cloud-init should report full specific full version with "cloud-init --version")


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-8.el8
changelog:
  - ci-Missing-IPV6_AUTOCONF-no-to-render-sysconfig-dhcp6-s.patch [bz#1859695]
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-9.el8
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900892]
  - ci-Revert-ssh_util-handle-non-default-AuthorizedKeysFil.patch [bz#1919972]
  - Resolves: bz#1900892
    ([Azure] Update existing user password RHEL8x)
  - Resolves: bz#1919972
    ([RHEL-8.4] ssh keys can be shared across users giving potential root access)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8
changelog:
  - ci-fix-a-typo-in-man-page-cloud-init.1-752.patch [bz#1913127]
  - Resolves: bz#1913127
    (A typo in cloud-init man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.2
changelog:
  - ci-Fix-requiring-device-number-on-EC2-derivatives-836.patch [bz#1942699]
  - Resolves: bz#1942699
    ([Aliyun][RHEL8.4][cloud-init] cloud-init service failed to start with Alibaba instance [rhel-8.4.0.z])


author: Ray Strode <rstrode@redhat.com> - 80.8-1
changelog:
  - Fix black spot in one of the backgrounds
    Resolves: #1684106
  - Add missing 2560x1600 8-abstract-light background
    Resolves: #1692309
  - letter box instead of crop backgrounds when there's no
    good aspect ratio
    Related: #1720610


author: Ray Strode <rstrode@redhat.com> - 81.0-1
changelog:
  - Add wallpapers for wider screen monitors
    Related: #1720610
  - Move logo to corner in wallpapers that have it in center
    Resolves: #1706793


author: Ray Strode <rstrode@redhat.com> 84.3-1
changelog:
  - Another round of background updates. This:
       - downscales wallpapers to match their labeled size
       - fixes a few portrait/landscape swaps
       - moves centered logos away from center in portrait
         wallpapers
    Related: #1854287


author: Ray Strode <rstrode@redhat.com> 84.4-1
changelog:
  - Another round of background updates.  This:
       - Fixes missized image
       - Removes rendering artifacts from some of the backgrounds
       - Removes extraneous wallpapers for aspect ratios we don't care about
    Related: #1854287


author: Igor Zubkov <izubkov@cloudlinux.com> - 7-4.cloudlinux
changelog:
  - Rename to cloudlinux-indexhtml
  - Add Obsoletes: redhat-indexhtml
  - Add Provides: redhat-indexhtml = %{version}-%{release}
  - Add Obsoletes: centos-indexhtml
  - Add Provides: centos-indexhtml = %{version}-%{release}


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1-1.20
changelog:
  - AL-2064: Add psaadm user to linksafe group on Plesk Onyx
  - AL-2069: Fix alt-* packages files permissions correction


author: Stepan Oksanichenko <soksanichenko@cloudlinux.com> - 1-1.22
changelog:
  - CAG-714: cloudlinux-linksafe package should turn off symlink traversal protection by default. Part II


author:
  Stas Django <ssergiienko@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> - 1-1.23

changelog:
  - CAG-833: /scripts/postupcp issue (cloudlinux-linksafe?)
  - LU-482 Added root permission check to cl-linksafe-reconfigure


author: Anton Volkov <avolkov@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> - 1-1.24
changelog:
  - LU-1641: investigate issues with CL8 installation into empty chroot (ISO install)
  - SonarQube cloudlinux-linksafe ger_ev


author: Anton Volkov <avolkov@cloudlinux.com> - 1-1.25
changelog:
  - LVEMAN-1648: add "--skip-php-reload" to cagefsctl --setup-cl-selector called by /usr/bin/cl-linksafe-reconfigure


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 1-3.2
changelog:
  - LVEMAN-1748: Move linksafe group creation to %pre
  - LU-2436: Remove cllib dependency from cloudlinux-linksafe


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, soksanichenko <soksanichenko@cloudlinux.com> 1.0.0-1

changelog:
  - LU-2443, LU-2447, LU-2321, LU-2352, LU-2334, LU-2268, LU-2296, LU-2229, LU-2172, LU-2133: preparations of CloudLinux Solo OS meta package


author: Sergey Kokhan <skokhan@cloudlinux.com> - 3.9-1
changelog:
  - MODLS-528: Fixed error on restore "Too big FD number to restore"
  - MODLS-516: Open out of jail vma files before entering jail
  - Updated to CRIU version 3.9


author: Sergey Kokhan <skokhan@cloudlinux.com> Rostyslav Tulchii <rtulchii@cloudlinux.com> - 3.9-2
changelog:
  - MODLS-564: Remove errors that were logged by criu in apache error_log
  - MODLS-575: Fixed bug when restored lsphp masters spawn children with PIDs lower than last_pid


author: Sandro Mani <manisandro@gmail.com> - 2.15.6-2
changelog:
  - Fix licensecheck incorrectly detecting mime strings such as text/x-c++ as a binary file (#1249227)


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.5-5
changelog:
  - Related: #1581665 - provide useful symlinks to a manpage
    (tkasparek@redhat.com)
  - Resolves: #1581665 - provide yum-rhn-plugin on new RHEL systems
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.5-6
changelog:
  - spec cleanup (no more builds on Fedora <= 25) (michael.mraka@redhat.com)
  - Resolves: #1637980 - fixed plugin for dnf > 3.6.0 (michael.mraka@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.5-3
changelog:
  - %if 0%{?fedora} <= 25 is always true on rhel (tkasparek@redhat.com)
  - rhel8 utilizes python3 (tkasparek@redhat.com)


author: Sérgio Basto <sergio@serjux.com> - 1.18.25-5
changelog:
  - Revert "Bundle a version of tar to make it compatible in EL7"
  - Keep BR: perl(Digest)
  - Remove --clamp-mtime option on tar of el7.
  - Add Requires perl(Digest::MD5) and perl(Digest::SHA*) on dpkg-perl (#1628409)


author: Sérgio Basto <sergio@serjux.com> - 1.18.25-8
changelog:
  - Requires perl(MIME::Lite) on dpkg-dev (rhbz #1678637)
  - Adds check section and performs unit tests but ignores failures


author: Dominik Mierzejewski <rpm@greysector.net> - 1.23-1
changelog:
  - update to 1.23 (#1597055)
  - point to working URLs
  - pretend t.tar test succeeds for now (#1601392)
  - make testsuite more verbose for the future


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 1.00.38-1
changelog:
  - Update to 1.00.38
  - split freetds-libs package (for multiarch support)
  - change default tds vesrion to auto
  - move odbc plugin from devel to libs package (#1449881)


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream release
  - Backport a patch to fix the synaptics fingerprint reader update.
  - Resolves: #1775277


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - Rebase package to include support for latest OEM hardware and to
    support deploying UEFI SecureBoot dbx updates.
  - Resolves: #1870811


author: Richard Hughes <richard@hughsie.com> 1.5.5-2
changelog:
  - Do not invalidate all remote timestamps during package install to fix rpm -V.
  - Backport some important high priority fixes from upstream.
  - Resolves: #1926382


author: Richard Hughes <richard@hughsie.com> 1.1.3-1
changelog:
  - New upstream release
  - Adds support for an upcoming Dell USB-C dock
  - Don't use an obsolete font when building the UEFI images
  - Resolves: #1607842


author: Richard Hughes <richard@hughsie.com> 1.1.4-1
changelog:
  - New upstream release
  - Use HTTPS_PROXY if set
  - Make the dell-dock plugin more robust in several ways
  - Adjust EVB board handling
  - Resolves: #1647557


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-4
changelog:
  - Fix %{perllibdir} path
  - %{perllibdir} now points to where perl-git modules are installed.
    This was introduced in fedora commit:
    f3c13faa206935a844e09c7dc9d78d6325100ced.


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-5
changelog:
  - Add %{?scl_prefix} macros for services + desktop files.
  - Add tests, checking hardcoded content of dist git sources,
  written by pstodulk.
  - Make git-gui.desktop, git@.service and gitweb-httpd.conf content
  point to the correct scl paths.
  - Move instaweb to separate subpackage
  - Switch instaweb default HTTP daemon to httpd
  - Use the correct apache module directory in instaweb.
  - Build docs with TZ=UTC to make results deterministic.
    Inspired by https://wiki.debian.org/ReproducibleBuilds/TimestampsInDocumentationGeneratedByAsciidoc


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-2
changelog:
  - Fix build when apr-util does not pull in apr-util-bdb, adapt the existing Fedora condition.
    Problem caused by changes in #1633973 and #1491151.
  - Fix builds without docs and without cvs and/or p4 (from skisela)
  - Fix smart-http test due to changes in cookie sort order in curl-7.61.1


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-3
changelog:
  - apply upstream run-command PATH fix (CVE-2018-19486)
  - config: document value 2 for protocol.version (upstream patch)


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
changelog:
  - Update to release 2.18.2
  - Remote code execution in recursive clones with nested submodules
    Resolves: CVE-2019-1387
  - Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,	
    CVE-2019-1352, CVE-2019-1353, CVE-2019-1354


author: Sergey Kozhekin <skozhekin@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> 1.2-61
changelog:
  - MYSQLG-552: deletion procedure for cPanel enhanced
  - MYSQLG-552: MD5 checksum for cl8 added to the "repo_md5" dictionary


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-66
changelog:
  - MYSQLG-568: Bad users list moved to private dir
  - MYSQLG-576: Prohibit clients upgrade MySQL 8 to MariaDB


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.2-68
changelog:
  - MYSQLG-595: systemd mount added for governor private bad users list
  - MYSQLG-588: IO limit calculation fixed


author: Alexandr Demeshko <ademeshko@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> 1.2-69
changelog:
  - MYSQLG-601: marked "all" mode as deprecated
  - MYSQLG-600: mariadb105 install is allowed on cPanel staring from v.98


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-91
changelog:
  - Fix tps-rpmtest failing due /boot/grub2/grubenv attributes mismatch
    Resolves: rhbz#1813959
  - Include in EFI build the modules needed for LUKS support
    Resolves: rhbz#1873725
  - Fix keyboards that report IBM PC AT scan codes
    Resolves: rhbz#1897587


author: Jan Hlavac <jhlavac@redhat.com> - 2.02-92
changelog:
  - grub2-install: disable support for EFI platforms
    Resolves: rhbz#1737444
  - Include a few more modules to EFI build needed for LUKS support (javierm)
    Related: rhbz#1873725


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-93
changelog:
  - add keylayouts and at_keyboard modules to UEFI Grub2 (rmetrich)
    Related: rhbz#1897587
  - at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
    Resolves: rhbz#1897587
  - add GRUB enhanced debugging features (rmetrich)
    Resolves: rhbz#1776249
  - ieee1275: Avoiding many unecessary open/close (diegodo)
    Resolves: rhbz#1862632
  - ieee1275: device mapper and fibre channel discovery support (diegodo)
    Resolves: rhbz#1873724


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-96
changelog:
  - Fix "Add 'at_keyboard_fallback_set' var to force the set manually"
    Related: rhbz#1897587
  - Fix a boot failure due patch "ieee1275: claim up to 256MB memory"
    Resolves: rhbz#1929111


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-98
changelog:
  - Fix another batch of CVEs
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-99
changelog:
  - Fix bug of grub2-install not checking for the SBAT option
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-29
changelog:
  - Resolves: #1823263 (CVE-2020-1934) - CVE-2020-1934 httpd: mod_proxy_ftp use of
    uninitialized value


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-31
changelog:
  - Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
    not respect expiry time
  - Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
    overflow
  - Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
  - Resolves: #1869576 - httpd : mod_proxy should allow to specify
    Proxy-Authorization in ProxyRemote directive
  - Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
  - Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
    a balancer


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-33
changelog:
  - Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues
  - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1680118 - unorderly connection close when client attempts
    renegotiation


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-36
changelog:
  - Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
    mod_proxy_wstunnel
  - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-37
changelog:
  - Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
    to be able to handle certs without matching private key


author: Pavel Alexeev <Pahan@Hubbitus.info> - 2.4.7.01.1
changelog:
  - Owesome! Httpd 2.4.7 pushed. It shoud not require any hack anymore.
  - Major update to 2.4.7-01.
  - Apache from 2.4 version have modularity structure, so many changes:
  	- Mpm may be build without apache source tree!
  	- Exclude apache sources, turn mpm-itk tarball into regular source0.
  	- So drop all black magic!
  	- Instal it as module, retire separate systemd service files and related stuff.
  	- Rewrite README.Fedora.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 2.4.7.01-5
changelog:
  - Fix build issue on EL7 (rhbz# 1188159). Big thanks to Athmane Madjoudj <athmane@fedoraproject.org> for the work.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 2.4.7.04-1
changelog:
  - Update to version 2.4.7-04 to solve problem https://lists.err.no/pipermail/mpm-itk/2015-September/000925.html. By mail request of Marco Matarazzo.


author: Jan Macku <jamacku@redhat.com> - 10.00.8-1
changelog:
  - rwtab: Add support for chrony
  - ifup-eth: Switch to bc utility, which supports floating point computations.
  - Replace grep -EL with subshell since -L changed behaviour


author: Jan Macku <jamacku@redhat.com> - 10.00.10-1
changelog:
  - Allow updating rfkill switch status while in readonly root mode
  - service: Prevent variables from globbing
  - Allow updating mlocate.db while in readonly root mode


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 10.00.15-1.cloudlinux
changelog:
  - CLKRN-639: added a script to collect data from clients' servers after a panic occurred
  - CLKRN-681: update to 10.00.9-1.cloudlinux
  - CLKRN-620: added netconsole config detailed description, corrected spec
  - CLKRN-620: added ptr for sentry server's ip (77.79.198.28)
  - Add optional 'dev' keyword
  - CLKRN-595: added logs reporting on a kernel crashing event


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 10.00.15-1.cloudlinux.2
changelog:
  - CLKRN-796: added needed dependency for scriptlets
  - CLKRN-785: improved parsing vmcore-dmesg.txt by cloudlinux-collect-panic-info script
  - CLKRN-786: deleted all debug output to prevent crontab email notifications


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b08.
  - Adjust PR3083/RH134640 to apply after JDK-8182999
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Drop JDK-8223219 as now upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.0.ea
changelog:
  - JDK-8226870 removed clhsdb and hdsdb from the JRE bin directory, so we should do likewise.
  - Add alternatives support for these two new SDK binaries.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05.
  - Drop upstreamed patch JDK-8141570/PR3548.
  - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: gil cattaneo <puntogil@libero.it> - 1.5.2-4
changelog:
  - Fix FTBFS RHBZ#1239598
  - Fix BR list
  - Use BR mvn()-like
  - Fix some rpmlint problem
  - Introduce license macro
  - Adapt to current guideline


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.0.1-5
changelog:
  - Actually, specify pagesizes according to arches, closes #1545539
  - Remove patch disabling thp as this is now handled by configure, see
    upstream issue 526


author: Jan Stancek <jstancek@redhat.com> [4.18.0-296.el8]
changelog:
  - perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info (Prarit Bhargava) [1766743]
  - perf/x86/intel/uncore: Store the logical die id instead of the physical die id. (Prarit Bhargava) [1766743]
  - mm: fix page reference leak in soft_offline_page() (Aristeu Rozanski) [1768372]
  - mm,hwpoison: try to narrow window race for free pages (Aristeu Rozanski) [1768372]
  - mm,hwpoison: double-check page count in __get_any_page() (Aristeu Rozanski) [1768372]
  - mm,hwpoison: introduce MF_MSG_UNSPLIT_THP (Aristeu Rozanski) [1768372]
  - mm,hwpoison: return 0 if the page is already poisoned in soft-offline (Aristeu Rozanski) [1768372]
  - mm,hwpoison: refactor soft_offline_huge_page and __soft_offline_page (Aristeu Rozanski) [1768372]
  - mm,hwpoison: rework soft offline for in-use pages (Aristeu Rozanski) [1768372]
  - mm,hwpoison: rework soft offline for free pages (Aristeu Rozanski) [1768372]
  - mm,hwpoison: unify THP handling for hard and soft offline (Aristeu Rozanski) [1768372]
  - mm,hwpoison: kill put_hwpoison_page (Aristeu Rozanski) [1768372]
  - mm,hwpoison: refactor madvise_inject_error (Aristeu Rozanski) [1768372]
  - mm,hwpoison: unexport get_hwpoison_page and make it static (Aristeu Rozanski) [1768372]
  - mm,hwpoison-inject: don't pin for hwpoison_filter (Aristeu Rozanski) [1768372]
  - mm, hwpoison: remove recalculating hpage (Aristeu Rozanski) [1768372]
  - mm,hwpoison: cleanup unused PageHuge() check (Aristeu Rozanski) [1768372]
  - mm/madvise.c: replace with page_size() in madvise_inject_error() (Aristeu Rozanski) [1768372]
  - mm, soft-offline: convert parameter to pfn (Aristeu Rozanski) [1768372]
  - tick/nohz: Revert "Narrow down noise while setting current task's tick dependency" (Waiman Long) [1931004]
  - kvm: Add kvm_stat.service file and kvm_stat logrotate config to the tools (Thomas Huth) [1919930]
  - igc: fix link speed advertising (Corinna Vinschen) [1769701]
  - [crypto] crypto: qat - add capability detection logic in qat_4xxx (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add AES-XTS support for QAT GEN4 devices (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add AES-CTR support for QAT GEN4 devices (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - fix excluded_middle.cocci warnings (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add qat_4xxx driver (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add hook to initialize vector routing table (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - target fw images to specific AEs (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add gen4 firmware loader (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add support for broadcasting mode (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add support for shared ustore (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - allow to target specific AEs (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add FCU CSRs to chip info (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add CSS3K support (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - use ae_mask (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add check for null pointer (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add misc control CSR to chip info (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add wake up event to chip info (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add clock enable CSR to chip info (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add reset CSR and mask to chip info (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add local memory size to chip info (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add support for lm2 and lm3 (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add next neighbor to chip_info (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - replace check based on DID (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - introduce chip info structure (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - refactor long expressions (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - refactor qat_uclo_set_ae_mode() (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - move defines to header files (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - remove global CSRs helpers (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - refactor AE start (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - change micro word data mask (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - change type for ctx_mask (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add support for relative FW ucode loading (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - rename qat_uclo_del_uof_obj() (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - introduce additional parenthesis (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - remove unnecessary parenthesis (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - fix error message (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - fix CSR access (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - support for mof format in fw loader (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - replace pci with PCI in comments (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - remove cast for mailbox CSR (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - remove unneeded semicolon (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - extend ae_mask (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - allow for instances in different banks (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - refactor qat_crypto_dev_config() (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - refactor qat_crypto_create_instances() (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - change return value in adf_cfg_key_val_get() (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - change return value in adf_cfg_add_key_value_param() (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - remove unnecessary void* casts (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - call functions in adf_sriov if available (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - remove hardcoded bank irq clear flag mask (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - abstract writes to arbiter enable (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - use BIT_ULL() - 1 pattern for masks (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - replace constant masks with GENMASK (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - abstract build ring base (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - enable ring after pair is programmed (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - register crypto instances based on capability (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add support for capability detection (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - abstract arbiter access (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - remove unused macros in arbiter module (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - remove writes into WQCFG (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - update constants table (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - use admin mask to send fw constants (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - change admin sequence (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - rename ME in AE (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - add packed to init admin structures (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - abstract admin interface (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - relocate GEN2 CSR access code (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - split transport CSR access logic (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - fix configuration of iov threads (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - num_rings_per_bank is device dependent (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - mask device capabilities with soft straps (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - update IV in software (Vladis Dronov) [1833004]
  - [crypto] crypto: qat - remove unused function (Vladis Dronov) [1833004]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-297.el8]
changelog:
  - KVM: SVM: Make symbol 'svm_gp_erratum_intercept' static (Paolo Bonzini) [1769283]
  - KVM: SVM: Fix #GP handling for doubly-nested virtualization (Paolo Bonzini) [1769283]
  - KVM: SVM: Add support for SVM instruction address check change (Paolo Bonzini) [1769283]
  - KVM: SVM: Add emulation support for #GP triggered by SVM instructions (Paolo Bonzini) [1769283]
  - KVM: x86: Factor out x86 instruction emulation with decoding (Paolo Bonzini) [1769283]
  - gfs2: In gfs2_ail1_start_one unplug the IO when needed (Bob Peterson) [1648446]
  - gfs2: Free rd_bits later in gfs2_clear-rgrpd to fix use-after-free (Bob Peterson) [1648446]
  - gfs2: Only access gl_delete for iopen glocks (Bob Peterson) [1648446]
  - gfs2: Fix case in which ail writes are done to jdata holes (Bob Peterson) [1648446]
  - gfs2: simplify gfs2_block_map (Bob Peterson) [1648446]
  - gfs2: Only set PageChecked if we have a transaction (Bob Peterson) [1648446]
  - gfs2: don't lock sd_ail_lock in gfs2_releasepage (Bob Peterson) [1648446]
  - gfs2: make gfs2_ail1_empty_one return the count of active items (Bob Peterson) [1648446]
  - gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe (Bob Peterson) [1648446]
  - gfs2: enhance log_blocks trace point to show log blocks free (Bob Peterson) [1648446]
  - gfs2: rename gfs2_write_full_page to gfs2_write_jdata_page, remove parm (Bob Peterson) [1648446]
  - PM: hibernate: flush swap writer after marking (Lenny Szubowicz) [1898677]
  - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown (Lenny Szubowicz) [1898677]
  - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation (Lenny Szubowicz) [1898677]
  - bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation (Jiri Benc) [1882215]
  - ice, xsk: clear the status bits for the next_to_use descriptor (Jiri Benc) [1906820]
  - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925690]
  - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925690]
  - blk-mq: test QUEUE_FLAG_HCTX_ACTIVE for sbitmap_shared in hctx_may_queue (Ming Lei) [1922013]
  - blk-mq: Improve performance of non-mq IO schedulers with multiple HW queues (Ming Lei) [1922013]
  - Revert "blk-mq, elevator: Count requests per hctx to improve performance" (Ming Lei) [1922013]
  - bpftool: Disable CAP_BPF check for feature command (Jiri Olsa) [1921542]
  - RDMA/siw: Fix calculation of tx_valid_cpus size (Kamal Heib) [1919502]
  - net/mlx5e: Disable performance optimization for IPv4/IPv6 ethertype (Alaa Hleihel) [1928671 1919807]
  - IB/mlx5: Return appropriate error code instead of ENOMEM (Alaa Hleihel) [1928671]
  - net/mlx5: Disable devlink reload for lag devices (Alaa Hleihel) [1928671 1929166]
  - net/mlx5: Disable devlink reload for multi port slave device (Alaa Hleihel) [1928671 1929166]
  - net/mlx5: Disallow RoCE on lag device (Alaa Hleihel) [1928671 1929166]
  - net/mlx5: Disallow RoCE on multi port slave device (Alaa Hleihel) [1928671 1929166]
  - net/mlx5: Fix health error state handling (Alaa Hleihel) [1928671]
  - net/mlx5e: Change interrupt moderation channel params also when channels are closed (Alaa Hleihel) [1928671]
  - net/mlx5e: Don't change interrupt moderation params when DIM is enabled (Alaa Hleihel) [1928671]
  - net/mlx5e: E-switch, Fix rate calculation for overflow (Alaa Hleihel) [1928671]
  - net/mlx5e: Release skb in case of failure in tc update skb (Alaa Hleihel) [1928671 1929119]
  - net/mlx5e: Check tunnel offload is required before setting SWP (Alaa Hleihel) [1928671 1925439]
  - net/mlx5e: kTLS, Use refcounts to free kTLS RX priv context (Alaa Hleihel) [1928671 1928706]
  - net/mlx5e: Fix CQ params of ICOSQ and async ICOSQ (Alaa Hleihel) [1928671 1928706]
  - net/mlx5e: Replace synchronize_rcu with synchronize_net (Alaa Hleihel) [1928671 1913616]
  - net/mlx5e: Enable XDP for Connect-X IPsec capable devices (Alaa Hleihel) [1928671 1856795]
  - net/mlx5e: Enable striding RQ for Connect-X IPsec capable devices (Alaa Hleihel) [1928671 1926120]
  - fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [1920776] {CVE-2020-0466}
  - do_epoll_ctl(): clean the failure exits up a bit (Carlos Maiolino) [1920776] {CVE-2020-0466}
  - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [1920776] {CVE-2020-0466}


author: Jan Stancek <jstancek@redhat.com> [4.18.0-298.el8]
changelog:
  - drm/i915/gen11+: Only load DRAM information from pcode (Lyude Paul) [1934537]
  - drm/i915/dg1: Wait for pcode/uncore handshake at startup (Lyude Paul) [1934537]
  - powercap/intel_rapl: add support for TigerLake Desktop (David Arcari) [1932457]
  - powerpc/perf: Fix handling of privilege level checks in perf interrupt context (Gustavo Luiz Duarte) [1918411]
  - NFSv4.2: fix error return on memory allocation failure (Scott Mayhew) [1917689]
  - NFSv4.2: improve page handling for GETXATTR (Scott Mayhew) [1917689]
  - NFSv4.2: Fix up the get/listxattr calls to rpc_prepare_reply_pages() (Scott Mayhew) [1917689]
  - NFS: Fix rpcrdma_inline_fixup() crash with new LISTXATTRS operation (Scott Mayhew) [1917689]
  - SUNRPC: Fix up xdr_set_page() (Benjamin Coddington) [1917689]
  - NFSv4: Fix open coded xdr_stream_remaining() (Benjamin Coddington) [1917689]
  - SUNRPC: Clean up the handling of page padding in rpc_prepare_reply_pages() (Benjamin Coddington) [1917689]
  - SUNRPC: Fix up xdr_read_pages() to take arbitrary object lengths (Benjamin Coddington) [1917689]
  - SUNRPC: Clean up helpers xdr_set_iov() and xdr_set_page_base() (Benjamin Coddington) [1917689]
  - SUNRPC: Split out a function for setting current page (Benjamin Coddington) [1917689]
  - SUNRPC: Fix up typo in xdr_init_decode() (Benjamin Coddington) [1917689]
  - NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Benjamin Coddington) [1917689]
  - net: fix pos incrementment in ipv6_route_seq_next (Lorenzo Bianconi) [1926608]
  - ipv6_route_seq_next should increase position index (Lorenzo Bianconi) [1926608]
  - bpf: Clear subreg_def for global function return values (Yauheni Kaliuta) [1934062]
  - igc: Fix returning wrong statistics (Corinna Vinschen) [1910873]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-299.el8]
changelog:
  - md: Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1901598]
  - md: improve variable names in md_flush_request() (Xiao Ni) [1901598]
  - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1925711]
  - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1925711]
  - vt: Disable KD_FONT_OP_COPY (Dave Airlie) [1903937] {CVE-2020-28974}
  - drm/i915/rkl: Remove require_force_probe protection (Lyude Paul) [1937558]
  - drm/i915/tgl/psr: Disable PSR on Tigerlake for now (Lyude Paul) [1924702]
  - dm raid: fix discard limits for raid0 and raid10 (Mike Snitzer) [1934274]
  - dm: fix __send_changing_extent_only to avoid duplicate dm_target_offset() (Mike Snitzer) [1934274]
  - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing (Waiman Long) [1934212]
  - mm: memcontrol: fix slub memory accounting (Waiman Long) [1934212]
  - mm: memcontrol: fix swap undercounting in cgroup2 (Waiman Long) [1934212]
  - mm: memcontrol: fix NR_ANON_THPS accounting in charge moving (Waiman Long) [1934212]
  - mm, slub: better heuristic for number of cpus when calculating slab order (Waiman Long) [1934212]
  - Revert "mm: memcontrol: avoid workload stalls when lowering memory.high" (Waiman Long) [1934212]
  - selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed (Hangbin Liu) [1931732]
  - selftests/bpf: No need to drop the packet when there is no geneve opt (Hangbin Liu) [1931732]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-300.el8]
changelog:
  - [scsi] scsi: qedi: Correct max length of CHAP secret (Nilesh Javali) [1909180]
  - redhat: use tags from git notes for zstream to generate changelog (Frantisek Hrbata)
  - redhat: add CI file for kernel-private (Bruno Meneguele)
  - CI: Drop unused variable (Bruno Meneguele)
  - CI: Enable RT verification (Bruno Meneguele)
  - KVM: SVM: Clear the CR4 register on reset (Vitaly Kuznetsov) [1920788]
  - net: flow_offload: Add original direction flag to ct_metadata (Marcelo Ricardo Leitner) [1921946]
  - net/sched: cls_flower: Add match on the ct_state reply flag (Marcelo Ricardo Leitner) [1921946]
  - net/sched: cls_flower add CT_FLAGS_INVALID flag support (Marcelo Ricardo Leitner) [1921946]
  - net/sched: cls_flower: Reject invalid ct_state flags rules (Marcelo Ricardo Leitner) [1921946]
  - netlink: add mask validation (Marcelo Ricardo Leitner) [1921946]
  - netlink: create helpers for checking type is an int (Marcelo Ricardo Leitner) [1921946]
  - netlink: policy: correct validation type check (Marcelo Ricardo Leitner) [1921946]
  - netlink: make NLA_BINARY validation more flexible (Marcelo Ricardo Leitner) [1921946]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-301.el8]
changelog:
  - ibmvnic: fix a race between open and reset (Diego Domingos) [1940042]
  - ibmvnic: Set to CLOSED state even on error (Diego Domingos) [1940042]
  - ibmvnic: device remove has higher precedence over reset (Diego Domingos) [1940042]
  - ibmvnic: merge do_change_param_reset into do_reset (Diego Domingos) [1940042]
  - ibmvfc: disable MQ channelization by default (Gustavo Luiz Duarte) [1939359]
  - pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process() (Steve Dickson) [1926945]
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930833] {CVE-2021-27365}
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930856] {CVE-2021-27363}
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930809] {CVE-2021-27364}
  - futex: Handle faults correctly for PI futexes (Waiman Long) [1924635]
  - futex: Simplify fixup_pi_state_owner() (Waiman Long) [1924635]
  - futex: Use pi_state_update_owner() in put_pi_state() (Waiman Long) [1924635]
  - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Waiman Long) [1924635]
  - futex: Provide and use pi_state_update_owner() (Waiman Long) [1924635]
  - futex: Replace pointless printk in fixup_owner() (Waiman Long) [1924635]
  - futex: Ensure the correct return value from futex_lock_pi() (Waiman Long) [1924635]
  - futex: Don't enable IRQs unconditionally in put_pi_state() (Waiman Long) [1924635]
  - futex: Fix incorrect should_fail_futex() handling (Waiman Long) [1924635]
  - futex: Consistently use fshared as boolean (Waiman Long) [1924635]
  - futex: Remove needless goto's (Waiman Long) [1924635]
  - futex: Remove put_futex_key() (Waiman Long) [1924635]
  - NFS: Correct size calculation for create reply length (Benjamin Coddington) [1934903]
  - SUNRPC: Set memalloc_nofs_save() for sync tasks (Benjamin Coddington) [1934098]
  - net/mlx5: CT: Add support for matching on ct_state reply flag (Alaa Hleihel) [1919651]
  - net/mlx5e: CT: manage the lifetime of the ct entry object (Alaa Hleihel) [1919651]
  - net/mlx5e: CT: Use per flow counter when CT flow accounting is enabled (Alaa Hleihel) [1919651]
  - net/mlx5e: Fix a use after free on error in mlx5_tc_ct_shared_counter_get() (Alaa Hleihel) [1919651]
  - net/mlx5e: CT: Use the same counter for both directions (Alaa Hleihel) [1919651]
  - ethtool: fix the check logic of at least one channel for RX/TX (Ivan Vecera) [1907406]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-302.el8]
changelog:
  - PCI: rpadlpar: Fix potential drc_name corruption in store functions (Gustavo Luiz Duarte) [1938116]
  - selftests: kvm: Add basic Hyper-V clocksources tests (Vitaly Kuznetsov) [1931782]
  - KVM: x86: hyper-v: Don't touch TSC page values when guest opted for re-enlightenment (Vitaly Kuznetsov) [1931782]
  - KVM: x86: hyper-v: Track Hyper-V TSC page status (Vitaly Kuznetsov) [1931782]
  - KVM: x86: hyper-v: Prevent using not-yet-updated TSC page by secondary CPUs (Vitaly Kuznetsov) [1931782]
  - KVM: x86: hyper-v: Limit guest to writing zero to HV_X64_MSR_TSC_EMULATION_STATUS (Vitaly Kuznetsov) [1931782]
  - drm/i915/guc: Update to use firmware v49.0.1 (Dave Airlie) [1935281] {CVE-2020-12362}
  - time: Enable __kernel_timespec for 32-bit vdso build (Waiman Long) [1936282]
  - lib/idr.c: document calling context for IDA APIs mustn't use locks (Chris von Recklinghausen) [1917764]
  - ida: Free allocated bitmap in error path (Chris von Recklinghausen) [1917764]
  - radix tree test suite: Fix compilation (Chris von Recklinghausen) [1917764]
  - vmalloc: convert to XArray (Chris von Recklinghausen) [1917764]
  - mm: pass addr as unsigned long to vb_free (Chris von Recklinghausen) [1917764]
  - radix tree: Remove multiorder support (Chris von Recklinghausen) [1917764]
  - radix tree test: Convert multiorder tests to XArray (Chris von Recklinghausen) [1917764]
  - radix tree tests: Convert item_delete_rcu to XArray (Chris von Recklinghausen) [1917764]
  - radix tree tests: Convert item_kill_tree to XArray (Chris von Recklinghausen) [1917764]
  - radix tree tests: Move item_insert_order (Chris von Recklinghausen) [1917764]
  - radix tree test suite: Remove multiorder benchmarking (Chris von Recklinghausen) [1917764]
  - radix tree test suite: Remove __item_insert (Chris von Recklinghausen) [1917764]
  - radix tree: Remove radix_tree_clear_tags (Chris von Recklinghausen) [1917764]
  - radix tree: Remove split/join code (Chris von Recklinghausen) [1917764]
  - radix tree: Remove radix_tree_update_node_t (Chris von Recklinghausen) [1917764]
  - mm: Convert truncate to XArray (Chris von Recklinghausen) [1917764]
  - copy rh_kabi.h to tools/testing/radix-tree/linux (Chris von Recklinghausen) [1917764]


author: Jan Stancek <jstancek@redhat.com> [4.18.0-303.el8]
changelog:
  - redhat: switch secureboot kernel image signing to release keys (Jan Stancek)
  - Revert "[md] md/raid5: add a new member of offset into r5dev" (Nigel Croxon) [1936903]
  - Revert "[md] md/raid5: make async_copy_data() to support different page offset" (Nigel Croxon) [1936903]
  - Revert "[crypto] md/raid5: add new xor function to support different page offset" (Nigel Croxon) [1936903]
  - Revert "[md] md/raid5: convert to new xor compution interface" (Nigel Croxon) [1936903]
  - Revert "[crypto] md/raid6: let syndrome computor support different page offset" (Nigel Croxon) [1936903]
  - Revert "[crypto] md/raid6: let async recovery function support different page offset" (Nigel Croxon) [1936903]
  - Revert "[md] md/raid5: let multiple devices of stripe_head share page" (Nigel Croxon) [1936903]
  - Revert "[md] md/raid5: resize stripe_head when reshape array" (Nigel Croxon) [1936903]
  - Revert "[md] md/raid5: reallocate page array after setting new stripe_size" (Nigel Croxon) [1936903]
  - ACPI: PNP: compare the string length in the matching_id() (Mark Langsdorf) [1933702]
  - ceph: add missing break when parsing "nowsync" mount option (Jeff Layton) [1932753]
  - get_maintainer.conf: Update with new location of RHMAINTAINERS (Prarit Bhargava)
  - redhat: make pathspec exclusion compatible with old git versions (Herton R. Krzesinski)
  - redhat/scripts: Update merge-subtrees.sh with new subtree location (Prarit Bhargava)
  - tree: Add RHMAINTAINERS soft link in 8.4 (Prarit Bhargava)
  - tree: remove existing redhat/rhdocs subtree in 8.4 (Prarit Bhargava)


author: Jan Stancek <jstancek@redhat.com> [4.18.0-304.el8]
changelog:
  - mm: Revert "remove the account_page_dirtied export" (Waiman Long) [1941257]
  - Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1940842]


author: Florian Festi <ffesti@redhat.com> - 123-1
changelog:
  - Update kmod.prov for better performance (#1794491)
  - Backport performance improvements for brp-mangle-shebangs (#1794779)


author: Eugene Syromiatnikov <esyr@redhat.com> - 116-1
changelog:
  - Forward-port RHEL-specific kmodtool/macros.kmp changes from RHEL 7,
    update kmodtool script for RHEL 8 (#1658414, #1666162)


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-10
changelog:
  - weak-modules: group modules on add-kernel
  - weak-modules: do not make groups if there are no extra modules
    Resolves: rhbz#1649211


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-26
changelog:
  - KMODLVE-392 fix load avg calculation for userland.
  - KMODLVE-394: resolve AB-BA deadlock between __set_page_dirty() and lve_io_account()
  - KMODLVE-392: loadavg for root should be fully accounted


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-27
changelog:
  - KMODLVE-393: lve cgroup rmdir fails with -EBUSY
  - KMODLVE-398: don't use ref-style in RCU-lookup
  - KMODLVE-395: fix module searching during lve service restart
  - KMODLVE-392: wrong assignment in get_avenrun handler


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-28
changelog:
  - KMODLVE-402 lvp0 destroy wait
  - KMODLVE-403: allow lve to be cleaned up on error
  - KMODLVE-401: setup buildsys-pre-build to delete liblve sources during kmod-lve building
  - KB-115 fix cl7h install
  - KMODLVE-393: lve_enter fault injection points for testing
  - CLKRN-697: datacycle does not provide polling
  - KMODLVE-400: fix symlink option bug


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-30
changelog:
  - KB-115: build 2.0-30
  - KMODLVE-407: release path after symlink lookup for CL7 lsm
  - CLKRN-741: adapt datacycle fsnotify hook on unlink/rmdir events to 8.2
  - KMODLVE-399: move exec handler to the new hook infra
  - CLKRN-736: fix kmod-qa 0102-procfs_protection on CL7h/8
  - KMODLVE-410: properly handle lve_leave_pid() errors


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-31
changelog:
  - KMODLVE-429: added depenency to lve package (must be >= 2.0-2)
  - KMODLVE-416: build fixes for 8.4
  - KMODLVE-421: incorrect db_governor/sql start order
  - Revert "CLKRN-736: fix kmod-qa 0102-procfs_protection on CL7h/8"
  - CLKRN-758: allow access to /proc/<pid>/fd/* symlinks
  - KMODLVE-413: do not lock parent dir i_mutex/i_rwsem twice
  - KMODLVE-340 reapply 8.2 install fixes


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-33
changelog:
  - KMODLVE-424: fix incorrect IO throttling accounting for CL7
  - KMODLVE-431: whitelist nf_conntrack_max
  - KMODLVE-430: add missing LVE_API_ENTER/EXIT directives
  - KMODLVE-417: fine-grained options for lve_enter


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.0-37
changelog:
  - KMODLVE-448: don't load the module if there's no CONFIG_SECURITY_PATH defined
  - KMODLVE-450: datacycle cannot flush ids > 65535
  - CLKRN-821: datacycle path names should be mangled


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-14_2
changelog:
  - [RHEL] Re-enable AEAD tests and ignore test result
  - [RHEL] Drop the ppc64 ignore-failures workaround


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-16_1
changelog:
  - [RHEL] Apply 'Add missing dependencies to the tests package'
  - [RHEL] Apply 'Update patch from upstream'


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Sergey Kokhan <skokhan@cloudlinux.com> 1.1-47
changelog:
  - MODLS-727: Removed /var/cpanel/conf/apache/main usage as it was removed in cPanel
  - alt-php74 support added


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-50
changelog:
  - MODLS-745: 1 second Apache restart condition detection added to starter
  - MODLS-746: Fix yum command string for CL8 stable in da_cb_install
  - MODLS-735: lsphp patch updated to to delete criu imgs when lsapi_backend_pgrp_max_crashes triggered
  - MODLS-737: DA hook script modified for CL8 and py3


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-51
changelog:
  - MODLS-789: rpm file integrity check added into da_cb_install
  - MODLS-760: Plesk removing hook fixed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-52
changelog:
  - MODLS-794: added no strict mode for configparser in stat utils
  - MODLS-800: Log level for backend PHP Notices changed


author: Alexandr Demeshko <ademeshko@cloudlinux.com> 1.1-53
changelog:
  - mod_lsapi changed for Litespeed SAPI 7.7
  - MODLS-811: Apache version detection fixed on update mod_lsapi


author:
  Sergey Kozhekin <skozhekin@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> Sergey Kokhan <skokhan@cloudlinux.com> 1.1-56

changelog:
  - MODLS-806: Dynamic lsapi_set_env added
  - MODLS-859: Added CRIU support to httpd24-mod_lsapi
  - MODLS-851: CL license updated


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Paul Howarth <paul@city-fan.org> - 1.8.0-1
changelog:
  - Update to 1.8.0
    - Added a basic dockerised test suite
    - crypto: Add support for the mbedTLS backend
    - See RELEASE-NOTES for details of bug fixes


author: Paul Howarth <paul@city-fan.org> - 1.8.0-5
changelog:
  - scp: Do not NUL-terminate the command for remote exec (#1489736, GH#208)
  - Make devel package dependency on main package arch-specific
  - Drop EL-5 support
    - noarch sub-packages always available now
    - Drop legacy Group: and BuildRoot: tags
    - Drop explicit buildroot cleaning
    - %{__isa_bits} always defined now


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-7.el8_0.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Danilo de Paula <ddepaula@redhat.com> - 1.8.0-8.1
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1696354
    (Ensure modular RPM upgrade path [ZStream Clone] [rhel-8.0.0.z])


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - drop dependency on zlib-devel and bzip2-devel no more
    referenced in libzip.pc
  - drop rpath patch merged upstream


author: Remi Collet <rcollet@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2
  - add all explicit cmake options to ensure openssl is used
    even in local build with other lilbraries available


author: alutsiuk <alutsiuk@cloudlinux.com>, Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com> 3.0.11-1
changelog:
  - CMT-528: Fix error while getting Mysql Governor limits when Governor not present in system
  - LVES-1016 Resellers can see all accounts in the LVE Manager "Current Usage" menu


author: alutsiuk <alutsiuk@cloudlinux.com>, Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com> 3.0.12-1
changelog:
  - LVES-1016 Fix cloudlinux-top users filtering for reseller when running under root
  - LU-2191 Bring Userspace's packages to to the compliance of sources release policy


author:
  dkuropiatnyk <dkuropiatnyk@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 4.1.1-1

changelog:
  - LVES-951: Fix exception when stopping lvestats
  - LU-2334: clean up unneeded utils calls on single
  - LVES-981: Unmute start-stop lvestats server bats test
  - LU-2352: Renew cl single detection by marker logic according to spec
  - LU-2351: fix scriptlets problems on solo


author:
  Aleksey Zverev <azverev@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 4.1.2-1

changelog:
  - LVES-1041: lve-read-snapshot reads and modifies files in user-writeable directory as root:root
  - LVES-1042: Fix lve-stats scriptlet error
  - LVES-1040 lvechart uses insecure temporary directory
  - LVES-1037: Implement using custom directory for email templates


author: Dmitry Shibut <dshibut@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 4.1.3-1
changelog:
  - LVES-1041: Don't try to drop permissions if we already not root:root
  - LU-2298: Check spelling and correctness CL licenses in all files of Userspace projects


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Ilya Kartavtcev <ikartavtcev@cloudlinux.com> 4.1.4-1
changelog:
  - LU-2540 Add ability to turn off/on email lve-stats notification to user
  - LVES-1046 add reseller username to email notifications templates


author: alutsiuk <alutsiuk@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 4.3.3.1-1
changelog:
  - LU-2428 Change the way to get the version  of kmodlve in  cloudlinux-summary (for 7h/8)
  - LU-2426: Fix APD command in lve-utils cron


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com>, Hasan <haliev@cloudlinux.com> 5.1.1-1

changelog:
  - LU-2388: Fix hidepid behaviour on CL8
  - LU-2321 Conflict mod_hostinglimits in single edition
  - LU-2354: Split liblve.so into liblve and libsecureio
  - skip resellers packages cldiag check in solo
  - LU-2351 fix scriptlets problems on solo
  - LU-2366: Add telemetry about current WMT settings
  - LU-2353 do not install unneeded cronjobs for solo
  - LU-2352: Renew cl single detection by marker logic according to spec
  - LU-2367: Provide reinstall lvemanager-xray by cron for Single Edition
  - LU-2334 clean up unneeded utils calls on single
  - LU-2268 improve cloudlinux-customizer utility
  - LU-2328 Enable domains collector on CL single
  - LU-2269: Check usage of the list /proc params on CL single
  - LU-2300: Add "cldetect --detect-edition" command
  - LU-2270: Investigate a method of limitation resources for cl-summary on CL single
  - LU-2255: Enable cloudlinux-summary for CLOSS
  - Rename cloudlinux-reconfigure to cloudlinux-customizer
  - LU-2222: Create script that customizes CL installation
  - LU-2226 skip cloudlinux lve utils for cl single edition
  - LU-2229: Create cloudlinux-single-edition package


author: Aleksey Zverev <azverev@cloudlinux.com> 5.2.1-1
changelog:
  - LU-2375: Provide possibility to register cloudlinux with trial license via cloudlinux-license utility


changelog:
  - LU-2509: Fix APD statistics
  - CAG-1117: fix LiteSpeed setup for CageFS

author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Pavel Mogilnikov <pmogilnikov@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 5.2.4-1


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 5.2.5-1

changelog:
  - LU-2577: Update AVD run command in the lve-utils cron
  - LU-2513 Prevent situation when validation of license return true in case when trial license was not confirmed
  - XRAY-243: SSA statistics added to cloudlinux-summary
  - LU-2440: Add nginx webserver detection to statistics
  - LU-2529 add solo marker file presence to summary


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 5.2.6-1

changelog:
  - WEB-1937: Send UI statistics to ClickHouse
  - LU-2526: Fix no client_id in clsummary statistics on CL-Solo


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Alisher Matkurbanov <amatkurbanov@cloudlinux.com>, ikartavtcev <ikartavtcev@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> 5.2.8-1

changelog:
  - LU-2606 skip when docroot does not exist
  - LU-2634: Prevent cl-summary to read archived logs for lvemanager
  - LU-2606 Calculate number of WP sites with object-cache.php/advanced-cache.php enabled
  - LU-2603 add cron task to send statistics on first boot
  - LU-2542 Add metrics that will show if machine was installed from ISO or by cldeploy
  - LU-2479: implement handling of WPOS icon visibility for CL Solo
  - XRAY-243: added conflict for alt-php-ssa


author:
  Anton Volkov <avolkov@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, msozin <msozin@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Aleksey Zverev <azverev@cloudlinux.com>, Alisher Matkurbanov <amatkurbanov@cloudlinux.com>, ikartavtcev <ikartavtcev@cloudlinux.com>, Pavel <pmogilnikov@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, Mikhail Sozin <msozin@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Pavel Mogilnikov <pmogilnikov@cloudlinux.com> 6.1.0-2

changelog:
  - LU-2715: detect ROC plugin installed by other soft (not CL WPOS) and print error (v2)
  - LU-2716: fix error message about supported php versions
  - LU-2725: Don't pass env variables to php -m call (especially HTTP_ACCEPT_ENCODING)
  - LU-2713: Improve detection of ROC errors
  - LU-2732: Fix multisite detection constant to avoid false-positive results with debugging enabled
  - LU-2698 redis managing when set-module
  - LU-2717 check that all fatal errors are sent to sentry
  - LU-2695: UI is blocked when daemon is killed
  - LU-2697: Add trigger to lve-utils on update all needed alt-python37 packages
  - LU-2694 clwpos-enable should not write config if daemon does not start redis
  - LU-2636: Added check that redis extension is loaded. Part 3
  - LU-2640: Added messages changes by Inessa
  - LU-2712: fix "redis is not running" error message
  - LU-2709: fix "Conflicting object cache plugin enabled" message
  - LU-2696: Replace predis to phpredis in redis-cache config
  - LU-2710 detect issue with different php versions/handlers on the same docroot
  - LU-2709: fix "Conflicting object cache plugin enabled" message
  - LU-2664: Improve user reload process in CLWPOS daemon. Part 2.  Main part
  - LU-2636: Added check that redis extension is loaded. Part 2
  - LU-2636: Added check that redis extension is loaded
  - LU-2700: investigate WP_CACHE_KEY_SALT and WP_REDIS_PREFIX parameters
  - LU-2698 Problem with clwpos-admin during privileges drop
  - Add gettext to incompatible php error
  - LU-2640: Fix enable/disable errors format
  - Change minimal wordpress version from 3.3 to 3.7
  - LU-2640: Update error messages to add more context and information (part III)
  - LU-2640: Update error messages to add more context and information (part II)
  - LU-2640: Update error messages to add more context and information (part I)
  - LU-2664: Improve user reload process in CLWPOS daemon. Part 2. Message fix
  - LU-2549 add WPOS metrics to cloudlinux-summary for CL Shared Pro
  - LU-2685: check minimal required php version
  - LU-2664: Improve user reload process in CLWPOS daemon. Part 1. Refactoring daemon class
  - Fix: move clwpos_user_get_result function out of TestClwposAdmin class
  - LU-2684 Add headers to malfunctions and issues
  - LU-2667: Get rid of drop_permissions_if_needed decorator and enable code duplicates
  - LU-2486: Handle website response timeouts
  - LU-2508: Cover redis monitoring daemon with functional tests.
  - LU-2618: add context to output of clwpos-user disable command when module already disabled
  - LU-2599: Create enable without config changes function
  - LU-2668: Investigate issue with ea-php80 broken wp-cli
  - LU-2486: Handle multiple WP installations for domain
  - LU-2669: Redis purge, enable and disable must return actual memory usage
  - LU-2486: Add website checking logic and integrate it into existing enable/disable commands
  - LU-2669: clwpos-user set must return updated config
  - LU-2500: Implement scanning of users config files in redis monitoring daemon. Part 4
  - fixed "drop_user_privileges is not defined" in wpos_user.py
  - LU-2666 wp-config.php gets cleaned completely in some cases
  - LU-2486: Make --wp-path work same for enable and disable commands
  - LU-2486: Added special underscore operator for translatable strings
  - LU-2654: Redis maxmemory min and max must be changed and validated on UI
  - LU-2658 extend enable/disable responses with current issues
  - LU-2500: Implement scanning of users config files in redis monitoring daemon. Part 3. Kill redis for removed user
  - LU-2486: Added required argument --user for wpos-user utility
  - LU-2658 Update issues format in clwpos-user get/enable/disable command
  - LU-2574: Enable/disable by admin
  - LU-2537 cleanup deprecated/duplicated/unused wposctl&burstedlimits code
  - LU-2468: implement detection of multisite WP
  - LU-2652: add mutual exclusive argument groups
  - LU-2500: Implement scanning of users config files in redis monitoring daemon. Part 2
  - LU-2648: Don't hide cpanel WPOS icon
  - LU-2166: add hook: disable caching when a not supported php version or handler is selected for domain
  - LU-2642: Get rid of locking same file that we read/write
  - LU-2567: Fix disable command
  - LU-2628: small fixes proposed on demo
  - LU-2632 Detect ea-php74-snuffleupagus module while calling wp-cli
  - LU-2500: Implement scanning of users config files in redis monitoring daemon
  - LU-2619: add plugin_compatibility_check failure if object-cache.php exists but conflicting plugin not found
  - LU-2614: implement checking of CL license according to spec
  - LU-2631: Added "max_cache_memory" to json output for "clwpos-user get" command.
  - LU-2611: Added misconfiguration errors
  - LU-2610: disable alt-php support for WPOS on CL Solo
  - LU-2583: implement functional test for clwpos-user
  - LU-2489: implement clwpos-user enable command
  - LU-2629: Fix module check in user config
  - LU-2608: Add enable\disable to user config
  - LU-2567: Implemented clwpos-user disable
  - LU-2514: implement logs rotation
  - LU-2496: Implement clwpos-user set command
  - LU-2166: add hook: disable caching when a not supported php version or handler is selected for domain
  - LU-2495: Implemented clwpos-user get
  - LU-2603 add cron task to send statistics on first boot
  - LU-2542 Add metrics that will show if machine was installed from ISO or by cldeploy
  - LU-2479: implement handling of WPOS icon visibility for CL Solo
  - LU-2548: Implement cli argument parsing wpos-admin utility using argparse
  - LU-2517: WPOS should work on CL Solo + cPanel only
  - LU-2492: implement "clwpos-user do-action --action=purge --module=<str>" command
  - LU-2484: implement "clwpos-admin set-module" command for CL Solo
  - LU-2474: add WPOS metrics to cloudlinux-summary
  - LU-2565: Implement CLI argument parsing for clwpos-user utility
  - LU-2485: implement "clwpos-admin get-report" command for CL Solo
  - LU-2454: move old clwposctl utility to new location
  - LU-2501: Rework redis monitoring daemon
  - LU-2516: disable wpos cronjob on CL Solo
  - LU-2236: Improve redises monitoring process in clwpos daemon
  - LU-2460: Investigate and fix slow redis start in daemon
  - LU-2414: Implement cronjob to search for all WP sites
  - LU-2456: add rpm trigger to restart redis after redis rpm update
  - LU-2048: Refactor logging in WPOS CLI
  - LU-2409: add support for Redis Object Cache to clwpos utility
  - LU-2201: improve checking of requirements
  - LU-2199: Implement clwposctl apply-cache-for-all-domains command
  - LU-2175: Add check if w3tc plugin is installed already
  - LU-2120: do not enable caching when ea-php is selected for domain
  - LU-2154: Do not recreate redis.conf if it exists already
  - LU-2153: do not enable caching for not supported domain php handlers
  - LU-2120: do not enable caching when ea-php is selected for domain
  - LU-2138: make backup of w3tc config
  - LU-2085: Uninstall w3tc when removing WPOS
  - LU-2104: add option --wp-path
  - LU-2034 : implement setup of redis for user (part4)
  - CLWPOS daemon fix for CL6
  - LU-2122: Check that we use optimal config for w3tc
  - LU-2034: implement setup of redis for user (part3)
  - LU-2034 : implement setup of redis for user (part2)
  - LU-2107: Recreate redis instance for user after destroying LVE
  - LU-2093: Do not apply default when setting is present in bursting.json file
  - LU-2090: Improve error handling and argument processing
  - LU-2103: clwposctl install-cache should not break CSS
  - LU-2098: clwposctl utility should print pretty json by default
  - LU-2079: improve clwposctl help message
  - LU-2095: Add verbosity to clwposctl install/uninstall cache errors. Part 2
  - LU-2095: Add verbosity to clwposctl install/uninstall cache errors
  - LU-2094: update copyright_ignore file
  - LU-2034: implement setup of redis for user
  - LU-1997: Resolve conflict with hosting plans cronjob
  - LU-2035: implement installation of php-redis
  - LU-2036: implement installation of W3TC plugin
  - LU-2022: Implement monitoring service for redis
  - LU-2077: fix issues with downgrade (WPOS)
  - LU-2078: implement rotation of WPOS logs
  - LU-2063: Fix help message that cause unhandled error
  - LU-2059: Add logging errors and actions for bursted LVE limits
  - LU-2033: implement installation of wp-cli
  - LVEW-22: cagefs_enter_user: add --no-fork option
  - LU-2020: Implement clwposctl do-burst command
  - LU-1975: Implement clwposctl CLI (set-wpos and get-wpos commands)
  - LU-2017 : implement CLI for bursted LVE limits


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Hasan Aliyev <haliev@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 6.1.2-1

changelog:
  - LU-2722 detect CL ROC in summary
  - LU-2740: Check why -42 responses still present in our stats
  - LU-2686: collect statistics of used php versions for customer's WP sites
  - LU-2061: Replaced lve_enter_pid() on lve_enter_pid_flags()


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Hasan Aliyev <haliev@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 6.1.2-2

changelog:
  - LU-2722 detect CL ROC in summary
  - LU-2740: Check why -42 responses still present in our stats
  - LU-2686: collect statistics of used php versions for customer's WP sites
  - LU-2061: Replaced lve_enter_pid() on lve_enter_pid_flags()


author: Aleksey Zverev <azverev@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 6.1.3-2
changelog:
  - LU-2795 install redis php extension when it is needed only
  - LU-2733: Lveps doesn't show process if it doesn't have control group for CPU


author: Anton Volkov <avolkov@cloudlinux.com>, Vlad Fomin <vfomin@cloudlinux.com> 0.6.1-1
changelog:
  - added new "-k" option to lve_suwrapper (LVE_NO_KILLABLE)
  - remove warning lvewrappers/lve_exec.c:78:5: warning: implicit declaration of function lve_setup_fs
  - CAG-603: use CloudLinux Zug GmbH instead of Cloud Linux Inc
  - update EULA


author: msozin <msozin@cloudlinux.com> 0.6.3-1
changelog:
  - LVEW-15: cagefs_enter* and lve_(su)wrapper utilities should return non-zero exit code when child process is killed by unhandled signal


author: Aleksey Zverev <azverev@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 0.7.2-1
changelog:
  - LVEW-23: Add new flags
  - LU-2298: Check spelling and correctness CL licenses in all files of Userspace projects


author: Roman Krompets <rkrompets@cloudlinux.com> 6.3.14-1
changelog:
  - protractor-tests: Replace server URL for registration on cln staging
  - WEB-2047: Add additional info for website monitoring and lvestatistics tab regarding the survey settings(part 2)
  - WEB-2113: Implement installation of end-user xray plugin on custom panel
  - WEB-2103: "Skipped" status after DB Governor manual installation
  - WEB-1742: A bug when setting inode limits to unlimited through LVE Manager


author:
  Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 6.3.15-1

changelog:
  - WEB-2136: Protractor tests fixes.
  - WEB-2118: Plesk php selector not switching versions if account owns multiple domains and from end-user plugin.
  - WEB-2054: Do now show in UI errors related to https://surveys.cloudlinux.com
  - LU-2264: Python and Ruby selectors shown not installed on Dashboard in CL8


author: Pavel Negrobov <pnegrobov@cloudlinux.com> 6.3.16-1
changelog:
  - LVEMAN-1730: Settings in newrelic.ini get lost when saving changes in PHP Selector
  - LVEMAN-1732: Python/NodeJS selectors should recognize ea-ruby27-rubygem-passenger


author: Roman Krompets <rkrompets@cloudlinux.com>, Hasan Aliyev <haliev@cloudlinux.com> 6.3.17-1
changelog:
  - WEB-2145: X-Ray plugin doesn't work on Plesk beginning 18.0.34
  - WEB-2133: Check spelling and correctness CL licenses in all files of CLOS Dep
  - protractor-tests: Remove all dev repos to avoid expired builds.
  - WEB-2150: LVE manager integration error
  - LVEMAN-1727 Destroy apps is not working when approot is missed


author: Roman Krompets <rkrompets@cloudlinux.com> 6.3.18-1
changelog:
  - WEB-2111: Cannot set zlib.output_compression Off in PHP Selector UI
  - WEB-2169: Fix FileNotFoundError for case when ui_user_info script requires extra arguments.
  - WEB-2162: FIx wizard tests for governor in case when there is no available version of MySQL in cloudlinux's repos


author:
  alutsiuk <alutsiuk@cloudlinux.com> Pavel <pmogilnikov@cloudlinux.com> Roman Krompets <rkrompets@cloudlinux.com> 7.1.0-1

changelog:
  - LU-2351: Investigate & fix scriptlets problems of CL Solo upgrades
  - LU-2401: Fix wrong random crontab time
  - WEB-2168: Remove "Slow requests density in period" field from SSA report on CL Solo and tune "Average duration" field
  - WEB-2167: Ui improvements for WMT on CL Solo
  - LU-2464: remove crons on clsolo
  - WEB-2175: Fix issues after merge CL Solo into master
  - WEB-2174: Split email configuration into default and overridable
  - WEB-2181: Disable attempt to register cloudlinux by IP for solo edition case when license invalid
  - WEB-2143: Implement registration plugin getting trial license from CLN (for all CLOS)
  - WEB-2179: Fix comments from Demo


author:
  Roman Krompets <rkrompets@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Sedrak Gevorgyan <sgevorgyan@cloudlinux.com> 7.2.0-1

changelog:
  - WEB-2192: Fix comments from Demo (stable release TESTS)
  - WEB-2192: Fix comments from Demo (stable release)
  - WEB-2196: Release metrics: lve_number_of_opens, xray_number_of_installation, xray_number_of_visits
  - WEB-2193: Create banner/info block about deprecation of "all" mode for Governor and recommendation move to "abuser" mode
  - WEB-2188: Show warnings about nginx caching disabling in X-Ray plugins
  - WEB-1974: Implement a collector of activity in LVE Manager UI
  - WEB-2090: Adapt CI for CL Solo
  - WEB-2170: Lve manager not working on DA with php 8.0.3
  - WEB-1849 Snapshots tab in Resource usage plugin doesn't work with Arabic language selected in cPanel
  - WEB-2203: TEST 8.4 with autotests for UI
  - WEB-2204: Adapt script generate_snapshots.py used in protractor tests to changes from LVES-1041
  - LU-2298: Check spelling and correctness CL licenses in all files of Userspace projects
  - update copyright.py
  - protractor-tests: Adapt tests for ea-ruby-passenger


author: Roman Krompets <rkrompets@cloudlinux.com> 7.3.0-1
changelog:
  - WEB-2232: Enable automatic ip registration in LveManager for SOLO
  - WEB-2182: Small improvements for Cloudlinux Solo/Shared
  - WEB-2194: Add ability to turn off \ on email lve-stats notification for user
  - WEB-2213: Create dummy of WP Optimization Suite page for Solo in style "Coming Soon"


author: alutsiuk <alutsiuk@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.3.1-1
changelog:
  - LVEMAN-1749: Fix lvemanager-cron removing after package update
  - protractor-tests-fix-solo: Skip checking xray_number_of_installation for Solo


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.3.2-1
changelog:
  - WEB-2241: PHP Selector doesn't show text from name_modifier file
  - LVEMAN-1750 Cannot get supported versions for nodejs on CL8
  - protractor-tests: Added installation of mod_lsapi for DirectAdmin. Removed redunant test for Options tab
  - protractor-tests: Add installation of alt-python37-docopt to prevent image builder fails


author: Roman Krompets <rkrompets@cloudlinux.com> 7.5.0-1
changelog:
  - WEB-2258: Fix clean installation of lvemanager
  - WEB-2254: UI WPOS Demo Comments
  - WEB-2228: WPOS USER. Cover by integration tests the user side.
  - WEB-2243: Review and change text for WPOS UI according to requirements.
  - WEB-2253: Process and translate error details
  - WEB-2251: Add headers to malfunctions and issues
  - WEB-2240: WPOS: Fixes from Demo (19.07.2021)
  - WEB-2224: WPOS USER. Implement unavailable page.
  - WEB-2237: WPOS USER. Implement hints&tooltips
  - WEB-2238: WPOS USER. Implement loaders to show progress on user actions
  - WEB-2227: WPOS USER. Implement websites table.
  - WEB-2226: WPOS USER. Implement info panel.
  - WEB-2225: WPOS USER. Implement plugin header with controls.
  - WEB-2222: WPOS USER. Implement spa skeleton for user plugin.
  - WEB-2229: WPOS ADMIN: Implement settings for solo


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 7.5.1-1
changelog:
  - fix broken import
  - WEB-2259: Check workability of CL Manager on cPanel & WHM Version 98 with new theme "Jupiter"


author: Roman Krompets <rkrompets@cloudlinux.com> 7.5.3-1
changelog:
  - WEB-2284: Investigate and fix nightly jobs for cpanel-lvemanager
  - WEB-2261: Add posibility to translate certain phrases in php selector GUI
  - WEB-2242: Switching to the x-ray Staging should be done without manual steps
  - WEB-2249: Please update Jinja2 to the version jinja2-3.0.1 in /usr/share/l.v.e-manager/panelless-version/daemon/requirements.txt
  - WEB-2110: Fix UI issue when rendering menu in lvemanager
  - WEB-2244: Migrate cpanel-lvemanager spa to Angular 10


author: rkrompets <rkrompets@cloudlinux.com> 0.1-2
changelog:
  - WEB-2095: Refactor loader for X-Ray
  - WEB-2087: Small fixes for release throttling feature end-user Xray plugin


author: rkrompets <rkrompets@cloudlinux.com>, sgevorgyan <sgevorgyan@cloudlinux.com> 0.2-1
changelog:
  - WEB-2096: Modify the appearance of quick requests in X-Ray UI
  - WEB-2083: X-Ray improvements
  - WEB-2099: hideXrayApp should be set True in removal script
  - WEB-2101: Fix missing request information in the xray link
  - WEB-2067: e2e tests for X-ray client plugin
  - WEB-2081 Optimize requests call for X-Ray


author: Roman Krompets <rkrompets@cloudlinux.com> 0.4-1
changelog:
  - WEB-2145: X-Ray plugin doesn't work on Plesk beginning 18.0.34
  - WEB-2120: Fix beta issues with X-Ray


author: Roman Krompets <rkrompets@cloudlinux.com> 0.5-2
changelog:
  - WEB-2179: Fix comments from Demo
  - WEB-2161: Hide throttling-related info in X-Ray UI on CL Solo
  - WEB-2144: Consider system_id absence during x-ray installation


author: Roman Krompets <rkrompets@cloudlinux.com> 0.6-1
changelog:
  - WEB-2188: Show warnings about nginx caching disabling in X-Ray plugins
  - WEB-2170: Lve manager not working on DA with php 8.0.3


author: Roman Krompets <rkrompets@cloudlinux.com> 0.7-1
changelog:
  - WEB-2207: Add warning about probable enabled cache using X-Ray
  - WEB-2206: Add IO throttling detection to the X-Ray UI


author: Roman Krompets <rkrompets@cloudlinux.com> 0.8-1
changelog:
  - WEB-2239: Reduce the long of URL in X-Ray
  - WEB-2234: Update throttling notifications in X-Ray PDF reports


author: rkrompets <rkrompets@cloudlinux.com>, sgevorgyan <sgevorgyan@cloudlinux.com> 0.1-1
changelog:
  - WEB-2076: Prevent sending multiple the same requests
  - WEB-2078 Cache domains list
  - WEB-2075: Fix styles for end-user X-Ray plugin
  - WEB-2077: Implement interceptor to handle errors and redirect to unavailable page
  - WEB-2066: Make installation/uninstallation script for X-ray
  - WEB-2065: Create spec file for build rpm package for X-Ray client
  - WEB-2041: Implement X-Ray SPA application


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.23-1
changelog:
  - Rebase to 10.3.23
  - Make conflicts between corresponding mariadb and mysql packages explicit
  - Get rid of the Conflicts macro, it was intended to mark conflicts with
    *upstream* packages
    Resolves: #1853159


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-1
changelog:
  - Rebase to 10.3.27
  - mariadb-debug_build.patch is no more needed, upstream did the changes:
    https://github.com/MariaDB/server/commit/31eaa2029f3c2a4f8e5609ce8b87682286238d9a#diff-32766783af7cac683980224d63c59929
    https://github.com/MariaDB/server/commit/23c6fb3e6231b8939331e2d9f157092f24ed8f4f#diff-78f3162f137407db5240950beb2bcd7c


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-2
changelog:
  - Disable building of the ed25519 client plugin.
    From now on it will be shipped by 'mariadb-connector-c' package


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-3
changelog:
  - Remove mariadb_rpl.h from includedir
    This file is shipped in mariadb-connector-c package
  - Require matching version of mariadb-connector-c package


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.9.3-1
changelog:
  - Update to 2.9.3
  - Fixes various CVE's:
    RHBZ #1213960, #1262853, #1262854, #1274225, #1274226, #1276299
    RHBZ #1276300, #1277149, #1277150, #1281952, #1281953


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Rostyslav Tulchii <rtulchii@cloudlinux.com> - 1.0-37
changelog:
  - AAP-273: expand the range of LVEErrorCodes
  - AAP-253: spec and cmake redesigned for new httpd24 build
  - AAP-241: Update Copyright for mod_hostinglimits project
  - AAP-244: Fix cmakefiles for httpd24-mod_hostinglimits


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-1
changelog:
  - new version 1.11.3
  - Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
    connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-3
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: Leonid Kanter <lkanter@cloudlinux.com> - 0.7.2-1
changelog:
  - update to with-setid-mode="owner"
  - handle update of packages built with --with-setid-mode="owner" (dkasyanov@)


author: Michal Schorm <mschorm@redhat.com> - 8.0.13-1
changelog:
  - Rebase to 8.0.13
  - ICU patch removed; upstreamed
  - Patch for MySQL Router introduced. Do not build it.
  - Fixes for annocheck hardening
    Resolves: #1624148
  - CVEs fixed:
    CVE-2018-3276 CVE-2018-3200 CVE-2018-3137 CVE-2018-3284 CVE-2018-3195
    CVE-2018-3173 CVE-2018-3212 CVE-2018-3279 CVE-2018-3162 CVE-2018-3247
    CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174 CVE-2018-3282
    CVE-2018-3285 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3145
    CVE-2018-3170 CVE-2018-3186 CVE-2018-3182 CVE-2018-3133 CVE-2018-3143
    CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3286 CVE-2018-3185
    CVE-2018-3280 CVE-2018-3203 CVE-2018-3155


author: Matej Mužila <mmuzila@redhat.com> - 8.0.17-1
changelog:
  - Rebase to 8.0.17
  - Resolves: #1732043
  - CVEs fixed:
    CVE-2019-2737 CVE-2019-2738 CVE-2019-2739 CVE-2019-2740 CVE-2019-2741
    CVE-2019-2743 CVE-2019-2746 CVE-2019-2747 CVE-2019-2752 CVE-2019-2755
    CVE-2019-2757 CVE-2019-2758 CVE-2019-2774 CVE-2019-2778 CVE-2019-2780
    CVE-2019-2784 CVE-2019-2785 CVE-2019-2789 CVE-2019-2791 CVE-2019-2795
    CVE-2019-2796 CVE-2019-2797 CVE-2019-2798 CVE-2019-2800 CVE-2019-2801
    CVE-2019-2802 CVE-2019-2803 CVE-2019-2805 CVE-2019-2808 CVE-2019-2810
    CVE-2019-2811 CVE-2019-2812 CVE-2019-2814 CVE-2019-2815 CVE-2019-2819
    CVE-2019-2822 CVE-2019-2826 CVE-2019-2830 CVE-2019-2834 CVE-2019-2879


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.21-1
changelog:
  - Rebase to 8.0.21
  - Use bundled libzstd and libevent for RHSCL and RHEL-8.0.0
  - Check that we have correct versions in bundled(*) Provides
  - Remove re2 bundled dependency


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.22-1
changelog:
  - Update to MySQL 8.0.22
  - mysql-certs-expired.patch patched by upstream
  - New zlib_decompress binary file in test package


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.14.0-1
changelog:
  - Resolves: #1558420 - directory permissions are now correct after processing
    USR1 signal
  - Resolves: #1601414 - nginx: drop GeoIP support


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - new version 1.14.1
  - Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
    memory disclosure via mp4 module
  - Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
    via flaw in HTTP/2 implementation
  - Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-9
changelog:
  - Resolves: #1744811 - CVE-2019-9511 nginx:1.14/nginx: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1744325 - CVE-2019-9513 nginx:1.14/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745094 - CVE-2019-9516 nginx:1.14/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.0-1
changelog:
  - new version 1.16.0
  - enable ngx_stream_ssl_preread module
  - main package does NOT require all-modules package


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-2
changelog:
  - Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
    via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-2.1
changelog:
  - Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-2
changelog:
  - new version 1.18.0
  - Resolves: #1668717 - [RFE] Support loading certificates from hardware token
    (PKCS#11)
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1651377 - centralizing default index.html on nginx
  - Resolves: #1825683 - Outdated Red Hat branding used in nginx default pages


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.18.0-3.1
changelog:
  - Resolves: #1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Tomas Hoger <thoger@redhat.com> - 16.02-7
changelog:
  - Add conditional for building with(out) GUI support.  Keep GUI enabled for
    Fedora and EPEL builds, but disabled for RHEL.
  - Add missing dependency - 7zG requires 7z.so, so p7zip-gui needs to require
    p7zip-plugins.


author: Sérgio Basto <sergio@serjux.com> - 16.02-9
changelog:
  - Security fix for CVE-2017-17969 (from Debian)
  - Add 05-hardening-flags.patch, 09-man-update.patch, 10-drop-fm-doc.patch
    and 14-Fix-g++-warning.patch patches from Debian, very small changes
    better documentation, compile flags and compile warning.


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Anton Volkov <avolkov@cloudlinux.com>, Vladislav Fomin <vfomin@cloudlinux.com> 0.3-11
changelog:
  - PAMLVE-8: build pam_lve rpm package for CL8
  - PAMLVE-6: strange lve1 appears after attempt to create lvp
  - CAG-603: use CloudLinux Zug GmbH instead of Cloud Linux Inc
  - update EULA


author: Paul Howarth <paul@city-fan.org> - 0.161-25
changelog:
  - Spec clean-up
    - Classify buildreqs by usage
    - Make %files list more explicit
    - Use %license
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.912-5
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.946-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.022-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license
    - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 1.406-10
changelog:
  - Remove an unused dependency on Email::Address (bug #1475784)
  - Modernize spec file and specify all dependencies


author: Paul Howarth <paul@city-fan.org> - 1.406-14
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.216-1
changelog:
  - Update to 2.216
    - Do not re-fold folded lines
  - Classify buildreqs by usage
  - Drop legacy Group: tag
  - Drop provides/obsoletes for perl-Email-Simple-Creator added in 2010
  - Make %files list more explicit
  - Simplify find command using -delete
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Release with new tooling
  - This release by ETHER → update source URL
  - BR: perl-generators
  - Simpify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 2009041301-27
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Drop redundant buildroot cleaning in %install section
    - Don't need to remove empty directories from the buildroot
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package upstream's documentation


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.16-1
changelog:
  - Update to HTML-Formatter-2.16.
  - Reflect upstream having switched to ExtUtils::MakeMaker.
  - Spec cleanup.


author: Paul Howarth <paul@city-fan.org> - 0.19-5
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Use a patch rather than scripted iconv to fix documentation encodings
  - Simplify find command using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 0.20-1
changelog:
  - Update to 0.20
    - Fix test skip count on Win32 (CPAN RT#76335)
  - Drop UTF8 docs patch; issue fixed upstream


author: Paul Howarth <paul@city-fan.org> - 0.007-1
changelog:
  - Update to 0.007
    - Adapt to dot no longer being in @INC
    - Adapt to unicode syswrite being deprecated
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Meta 0.0.2
    - Eliminate spurious trailing whitespace
    - Eliminate File::Basename from test/
    - Add t/000-compile-modules.t


author: Paul Howarth <paul@city-fan.org> - 0.89-1
changelog:
  - Update to 0.89
    - Require Test::More ≥ 0.88 (GH#19)
    - Support the use of plain 'use Test::Base' without any tests (GH#21)
  - Classify buildreqs by usage
  - Drop legacy Group: tag
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.20180705-5
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package LICENSE file
    - Drop redundant use of %{?perl_default_filter}


author: Paul Howarth <paul@city-fan.org> - 0.05-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Warnings inside a subtest were not emitted as TAP events, breaking the TAP
      and making for great confusion: this is because of a bug in the core TAP
      formatter (https://github.com/Test-More/test-more/issues/776); warnings
      are now emitted as Ok events instead of Warning events


author: Paul Howarth <paul@city-fan.org> - 0.07-1
changelog:
  - Update to 0.07
    - Reverted back to using the Warning event type, since the bug in the Test2
      core that caused this to be a problem has since been fixed
    - Replaced use of Test2::Bundle::Extended with Test2::V0
  - Package new document CODE_OF_CONDUCT.md
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.08-1
changelog:
  - Update to 0.08
    - Use IPC::Run3 instead of Capture::Tiny for all tests, which fixes an issue
      with the 'tap-bug-in-test2.t' on Windows (CPAN RT#129294)


author: Paul Howarth <paul@city-fan.org> - 1.20140328-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Package LICENSE file
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.99-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Explicitly require perl(Geography::Countries)
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Paul Howarth <paul@city-fan.org> - 1.0004-2
changelog:
  - Incorporate feedback from package review (#1148577)
    - Fix typo in %description
    - Package eg/ as documentation


author: Paul Howarth <paul@city-fan.org> - 1.0005-1
changelog:
  - Update to 1.0005
    - Convert the distribution to use git, GitHub, and Dist-Zilla
    - Correct some spelling errors and add more tests
    - Remove trailing whitespace


author: Paul Howarth <paul@city-fan.org> - 1.0006-1
changelog:
  - Update to 1.0006
    - Fix failing to find the difference in this scenario (CPAN RT#84546):
      Before: <element>0</element>
      After: <element></element>
  - Drop EL-5 support:
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 2.000001-1
changelog:
  - Update to 2.000001
    - Update for perl 5.22 warning categories
    - Avoid using goto &UNIVERSAL::VERSION on perl 5.8, since it segfaults some
      builds
    - Also detect development directories based on .bzr directory
    - Various test clean-ups
  - Update %summary and %description to reflect that not all warnings are made
    fatal by this module


author: Paul Howarth <paul@city-fan.org> - 2.000002-1
changelog:
  - Update to 2.000002
    - Use ExtUtils::HasCompiler to detect compiler rather than ExtUtils::CBuilder
    - More comprehensive testing


author: Paul Howarth <paul@city-fan.org> - 2.000003-1
changelog:
  - Update to 2.000003
    - Update bundled ExtUtils::HasCompiler to 0.013 to fix potential false
      negative (CPAN RT#113637)
    - List optional XS dependencies as suggests rather than recommends
      (CPAN RT#107393)


author: Remi Collet <rcollet@redhat.com> - 7.2.7-1
changelog:
  - Update to 7.2.7 - http://www.php.net/releases/7_2_7.php
  - drop -mstackrealign option, workaround to #1593144


author: Remi Collet <rcollet@redhat.com> - 7.4.6-1
changelog:
  - update to 7.4.6
  - add ffi extension
  - add /usr/share/php/preload as default ffi.preload configuration
  - run FPM tests
  - set opcache.enable_cli in provided default configuration
  - ensure all shared extensions can be loaded
  - drop wddx, recode and extensions
  - run test suite using 4 concurrent workers


author: Remi Collet <rcollet@redhat.com> - 1:1.10.12-1
changelog:
  - update PEAR to 1.10.12
  - update Archive_Tar to 1.4.9
  - update Console_Getopt to 1.4.3
  - update XML_Util to 1.4.5


author: Leigh Scott <leigh123linux@googlemail.com> - 0.105-14
changelog:
  - Fix source url
  - Remove build requires desktop-file-utils
  - Add version to PolicyKit-authentication-agent provides
  - Spec file clean up


author: Scott K Logan <logans@cottsay.net> - 3.0.9-1
changelog:
  - Update to 3.0.9
  - Add spec conditionals for python version targeting (rhbz#1632320)
  - Fix theme package dependency (s/sphinx_rtd_theme/sphinx-theme-alabaster/)


author: Scott K Logan <logans@cottsay.net> - 3.0.12-2
changelog:
  - Add explicit conflict between unlike python2/3 subpackages (rhbz#1708871)
  - Make the -doc subpackage dependency weaker


author: Tomas Orsava <torsava@redhat.com> - 1.3.7-21
changelog:
  - Disabled docs because the docs build config is not ported to Python 3 and
    thus cannot be built with Python 3 version of Sphinx


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.7-27
changelog:
  - Remove nosetest-3 executable/manpage. This will be provided by python3 module.
  - Resolves: rhbz#1615727


author: Tomas Orsava <torsava@redhat.com> - 2.7.4-3
changelog:
  - Revert switching Python 3 subpackages to the python3X- prefix
  - Switch only the requires for python3-devel/debug to the python36-prefix:
    the rest of the packages in the python36 collection will have the python3
    prefix to be unified with the Python 3 packages for Platform-Python


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-5
changelog:
  - Require python2-psycopg2 instead of python-psycopg2 from the
    python2-psycopg2-debug subpackage
  - Resolves: rhbz#1628242


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-2
changelog:
  - New patch to not turn DeprecationWarning in tornado module into Exception
  - Fixes FTBFS with Python 3.8


author: Miro Hrončok <mhroncok@redhat.com> - 2.7.16-11
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require python2-setuptools from python2-devel to prevent packaging errors
  Resolves: rhbz#1718398


author: Tomas Orsava <torsava@redhat.com> - 2.7.16-12
changelog:
  - Adding FIPS compliance to Python 2 in RHEL8:
    - Updated patch 146 with a new version of the FIPS patch
    - Patch 169 has been removed, obsoleted by the updated patch 146
  Resolves: rhbz#1734126


author: Tomas Orsava <torsava@redhat.com> - 2.7.17-2
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883258


author: Charalampos Stratakis <cstratak@redhat.com> - 0.28.1-6
changelog:
  - Replace GCC's attribute optimize("Os") by the better supported and similar (cold).
  - Resolves: rhbz#1658621


author: Tomas Orsava <torsava@redhat.com> - 0.8.0-5
changelog:
  - Hardcode requires on python36-devel for the python36 module. This will have
    to be modified when python37 is added.


author: Tomas Orsava <torsava@redhat.com> - 1.0-16
changelog:
  - Update python macros to python2 versioned macros
  - Issue found when rebuilding the python27 module to include CVE fixes
  - Related: rhbz#1883890 rhbz#1883258


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.3-12
changelog:
  - Python 2 binary package renamed to python2-blinker
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.12.13-6
changelog:
  - Avoid use of undefined unversioned python macro (which leads to
    the binary package owning "/" :( )


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-6
changelog:
  - BuildRequire the python36-devel package when building for the python36 module
  - BuildRequire also python36-rpm-macros as part of the python36 module build


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.7.14-2
changelog:
  - Fix ambiguous Python 2 dependencies declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-2
changelog:
  - Modify for building on RHEL8
  - Disable the tests, because the linkchecker package isn't available in RHEL8
  - Resolves: rhbz#1656048


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-3
changelog:
  - Modify for prebuilding and deploying on RHEL8
  - Rename the info page to python2
  - Resolves: rhbz#1656048


author: Tomas Orsava <torsava@redhat.com> - 0.14-11
changelog:
  - Remove python2 executables - they are functionally identical to the python3
    executables, so we're only going to ship them in the python3 subpackage
  - Resolves: rhbz#1656477


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-10
changelog:
  - Skip python2 tests to allow removing python2-unittest2 from the distribution
  - Fix workaround for allowing Python 2 for build


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-11
changelog:
  - Disable the python3 subpackage
    Functionality of funcsigs is available in Python 3's inspect module.


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-9
changelog:
  - Drop dependency on python3-funcsigs
    (funcsigs functionality is in the Python 3 standard library -- inspect)
  - Drop dependency on python2-unittest2
    (Not available in the distro)

  - Fix python2 requires names


author: Charalampos Stratakis <cstratak@redhat.com> - 1.14.2-12
changelog:
  - Set proper build flags for https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  - Resolves: rhbz#1715036


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.3-15
changelog:
  - Use the system level root certificate instead of the one bundled in certifi
  Resolves: rhbz#1659551


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-16
changelog:
  - Add four new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1702473
  Resolves: rhbz#1643829


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  Resolves: rhbz#1870184


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.1-9
changelog:
  - Python 2 binary package renamed to python2-pluggy
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-6
changelog:
  - Don't use timeout in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1592940
  - Add missing BuildRequires


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-7
changelog:
  - Remove BuildRequires on python2-hypothesis, a circular dependency
  - Explicitly BuildRequire python-attrs


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2017.2-3
changelog:
  - Python 2 binary package renamed to python2-pytz
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Matěj Cepl <mcepl@redhat.com> - 2017.2-6
changelog:
  - remove test_tzinfo.PicklingTest.testRoundtrip which fails with our
    system-wide timezone database (#1497572)


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.12-9
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 2.18.4-6
changelog:
  - Skip all tests needing httpbin: httpbin has too many dependencies to be
    shipped in RHEL just for build-time package tests


author: Tomas Orsava <torsava@redhat.com> - 3-29
changelog:
  - Switch the Python 3 executable to /usr/libexec/platform-python
  - Update macros using pip or easy_install to be invoked through the main
    executable


author: Tomas Orsava <torsava@redhat.com> - 3-30
changelog:
  - Explicitly enable Python 2 when invoking Python 2 macros
    See: https://url.corp.redhat.com/rhel8-py2


author: Tomas Orsava <torsava@redhat.com> - 3-31
changelog:
  - Remove RHEL_ALLOW_PYTHON2_FOR_BUILD=1 from build and install macros,
    as that is where the user needs to set it themself


author: Tomas Orsava <torsava@redhat.com> - 3-32
changelog:
  - Merging: (Tue Jul 10 2018 Tomas Orsava <torsava@redhat.com> - 3-32)
    - Fix %py_byte_compile macro: when invoked with a Python 2 binary it also
      mistakenly ran py3_byte_compile
  - Merging: (Tue Jul 03 2018 Miro Hrončok <mhroncok@redhat.com> - 3-31)
    - Add %python3_platform useful for PYTHONPATH on arched builds
  - Merging: (Mon Jun 18 2018 Jason L Tibbitts III <tibbs@math.uh.edu> - 3-30)
    - Add %pypi_source macro, as well as %__pypi_url and
      %_pypi_default_extension.
  - Merging: (Wed Apr 18 2018 Miro Hrončok <mhroncok@redhat.com> - 3-29)
    - move macros.pybytecompile from python3-devel


author: Tomas Orsava <torsava@redhat.com> - 3-33
changelog:
  - macros.pybytecompile: Detect Python version through sys.version_info instead
    of guessing from the executable name


author: Miro Hrončok <mhroncok@redhat.com> - 3-37
changelog:
  - Workaround leaking buildroot PATH in 
  python_binary="%1"
  buildroot_path="%2"
  bytecode_compilation_path=".${buildroot_path/#$RPM_BUILD_ROOT}"
  failure=0
  pushd $RPM_BUILD_ROOT
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -O -m py_compile || failure=1
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -m py_compile || failure=1
  popd
  test $failure -eq 0
  - Resolves: rhbz#1644455


author: Nikola Forró <nforro@redhat.com> - 1.0.0-13
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1624172


author: Tomas Orsava <torsava@redhat.com> - 1.24.2-1
changelog:
  - Rebased to 1.24.2 to fix CVE-2019-11324
  - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
  - Resolves: rhbz#1706765 rhbz#1706762


author: Miro Hrončok <mhroncok@redhat.com> - 15.1.0-19
changelog:
  - Use wheels from RPM packages (rhbz#1659550) (rhbz#1659551)
  - Fail with a warning on Python versions < 2.7


author: Kalev Lember <klember@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Switch to new upstream at https://github.com/pygobject/pycairo
  - Switch to distutils build system
  - Tighten subpackage deps with the _isa macro
  - Rename Python 2 package to python2-cairo
  - Enable Python 3 support


author: Petr Viktorin <pviktori@redhat.com> - 1.16.3-2
changelog:
  - Allow Python 2 for build
    See: https://hurl.corp.redhat.com/rhel8-py2

  - Skip tests on Python 2 (python2-pytest is being removed)


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 final
  - Assorted fixes for validation
  - Add modulemd-validator tool based on v2 code
  - Fix a crash when merging defaults
  - Add missing BuildRequires


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-3
changelog:
  - Remove the Python 2 subpackage
  - Remove the libimagequant dependency
    The imagequant library was only used to support a non-default image
    quantization mode.


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-7
changelog:
  - Add upstream patch to solve build-time warning
  - Move patches to dist-git
  - Resolves: rhbz#1639348


changelog: - LU-1527: Implement solution according to spec of gradual rollout
author:
  Oleksandr <oshyshatskyi@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 2.8.16-14.cloudlinux.1


author:
  Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, Mikhail Sozin <msozin@cloudlinux.com> 2.8.16-14.cloudlinux.3

changelog:
  - RHNCLT-25: Allow set mirrorURL from file in up2date on cloudlinux-8
  - RHNCLT-26: Send hostname during checkin


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.4-1
changelog:
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "fix except in rhnlib to make it compatible with Python 2.4"


author: Michael Mraka <michael.mraka@redhat.com> 2.8.6-1
changelog:
  - remove install/clean section initial cleanup
  - removed Group from specfile
  - removed BuildRoot from specfiles


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.6-4
changelog:
  - don't package python2 files for rhnlib (tkasparek@redhat.com)
  - be compliant with new packaging guidelines when requiring python2 packages
    (tkasparek@redhat.com)


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.0-3
changelog:
  - Subpackage python2-toml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.2-2
changelog:
  - omit -qtdoc-doc bits, conflicts with real qt5-qtdoc (#1520355)
  - use %_qt5_docdir macro (instead of hard-coded %_docdir/qt5)
  - optimize build a bit


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.33-1
changelog:
  - fix rhnsd triggered upgrade of rhnsd on systemd systems
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "1260527 RHEL7 rhnsd reload doesn't work"


author: Vít Ondruch <vondruch@redhat.com> - 1.16.2-3
changelog:
  - Drop BR rubygem(prawn) and rubygem(prawn-table).
  - Drop BuildRequires: rubygem(rouge).
  - Add BuildRequires: rubygem(coderay) to fix several test cases.
  - Make test suite pass.


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc3-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc3
  - resolves: #1554753 - Fix CVE-2018-1050
  - resolves: #1617912 - Fix CVE-2018-10858
  - resolves: #1617913 - Fix CVE-2018-10918
  - resolves: #1617914 - Fix CVE-2018-10919
  - resolves: #1617915 - Fix CVE-2018-1139
  - resolves: #1612522 - Manpage fixes


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc5-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc5
  - resolves: #1610909 - Re-enable glubsterfs vfs module
  - resolves: #1624170 - Build with -fstack-protectore-strong if available
  - resolves: #1602685 - Fixed issues found by covscan


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.1-3
changelog:
  - Temporarily remove smbtorture from samba-test due to Python 2 linkage
  - related: #1609661 - samba-test package cannot be installed due to unresolved dependencies


author: Andreas Schneider <asn@redhat.com> - 4.9.1-5
changelog:
  - resolves: #1644327 - Segfault if wrong 'passdb backend' is configured
  - resolves: #1647959 - Segfault in the debug system with hardended build


author: Andreas Schneider <asn@redhat.com> - 4.9.1-6
changelog:
  - resolves: #1642092 - Harden [homes] share export
  - resolves: #1648846 - Fix out of bound array access in ctdb
  - resolves: #1657266 - Fix tmp directory creation in /run


author: Andreas Schneider <asn@redhat.com> - 4.9.1-7
changelog:
  - resolves: #1658690 - Add smbc_setOptionProtocols()
  - resolves: #1658678 - Fix spoolss client operations against Windows


author: Petr Pisar <ppisar@redhat.com> - 1.3.0-16
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.19-2
changelog:
  - Update "missing" scripts to automake-1.15
  - Add active polling for acquiring policy file
  - Fix translation of hex values in AVCs (#1477236, #1709742)
  - require initscripts to ensure that "service" call works properly


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.21-1
changelog:
  - Use dbus.mainloop.glib.DBusGMainLoop() instead of dbus.glib
  - Fix AVC.__typeMatch to handle aliases properly
  - Handle sockets with abstract path properly (#1775135)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.22-2
changelog:
  - Log plugin exception traceback when log level is DEBUG
  - sepolicy.info() returns a generator, not a list (#1784564)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.23-1
changelog:
  - browser: Check return value of Gdk.Screen().get_default() (#1574434)
  - Improve and unify error messages (#1763982)
  - setroubleshoot.util: Catch exceptions from sepolicy import
  - Add dpkg support
  - Do not refer to hardcoded selinux-policy rpm in signature
  - Make date/time format locale specific (#1812674)
  - Improve speed of plugin evaluation (#1794807)
  - Do not try to report a bug on None package
  - sealert: Drop unused import slib.dbus.service
  - Drop updater.py - it's not used and doesn't work
  - root user doesn't need to use SetroubleshootPrivileged API
  - Use pydbus, a modern Python dbus API, for SetroubleshootPrivileged
  - Report bug on a package which owns the related SELinux domain (#1811644)
    https://pagure.io/setroubleshoot/issue/18
  - Add Local SELinux policy package version to analyses reports
  - setroubleshoot.utils.get_rpm_nvr_by_scontext add option to use DBUS method
  - Export setroubleshoot.utils.get_rpm_nvr_by_scontext via DBUS
  - setroubleshoot.util: get_rpm_nvr_by_type() and get_rpm_nvr_by_scontext()


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
  - Update translations (#1820570)
  - Log full reports with correct syslog identifier
  - Cancel pending alarm during AVC analyses


author: Ondrej Vasik <ovasik@redhat.com> - 2.12.0-1
changelog:
  - move /etc/networks from initscripts to setup
  - move /etc/profile.d/lang.{sh,csh} from initscripts to setup


author: Ondrej Vasik <ovasik@redhat.com> - 2.12.2-2
changelog:
  - do not ship /etc/hosts.allow and /etc/hosts.deny (no need for them
    as we don't allow tcp_wrappers in RHEL8, #1663556)


author: Martin Osvald <mosvald@redhat.com> - 2.12.2-3
changelog:
  - add pcp user to /etc/aliases (#1744089)
  - set PATH if it is empty in csh.login (#1744104)
  - lang.csh: prevent grep from failing so scripts do not end
    prematurely when tcsh -e option in use (#1678706)
  - use full path for non-builtins (#1688302)
  - add nrpe tcp port 5666 to /etc/services (#1730396)


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
    Resolves: rhbz#1830871
  - Fix a shim crash when attempting to netboot
    Resolves: rhbz#1795654


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Javier Martinez Canillas <javierm@redhat.com> - 15-3
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715878
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717064


author: Peter Jones <pjones@redhat.com> - 15.3-0~1
changelog:
  - Update to shim 15.3
    - Support for revocations via the ".sbat" section and SBAT EFI variable
    - A new unit test framework and a bunch of unit tests
    - No external gnu-efi dependency
    - Better CI
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-1
changelog:
  - Update to shim 15.4
    - Support for revocations via the ".sbat" section and SBAT EFI variable
    - A new unit test framework and a bunch of unit tests
    - No external gnu-efi dependency
    - Better CI
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-2
changelog:
  - Fix the ia32 build.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-3
changelog:
  - Build with the correct certificate trust list for this OS.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-4
changelog:
  - Fix the sbat data to actually match /this/ product.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Pavel Moravec <pmoravec@redhat.com> = 4.0-2
changelog:
  - [cleaner] more streamlined sanitize_item method
    Resolves: bz1827801
  - [openstack_ironic] Missing ironic-inspector configs
    Resolves: bz1874295
  - Add support to collect hardware component logs
    Resolves: bz1880372
  - [crio] collect /etc/crio/crio.conf.d/
    Resolves: bz1881118
  - [policy] Handle additional failure conditions for FTP uploads
    Resolves: bz1882368
  - [filesys] never collect content of /proc/fs/panfs
    Resolves: bz1886782
  - [kdump] Collect new kdump logfiles
    Resolves: bz1887390
  - [stratis] Collect key list and report engine
    Resolves: bz1888012
  - return tmp-dir with absolute path
    Resolves: bz1891562


author: Pavel Moravec <pmoravec@redhat.com> = 4.0-3
changelog:
  - [ovirt] collect /etc/pki/ovirt-engine/.truststore
    Resolves: bz1848095
  - [collector] allow overriding plain --cluster-type
    Resolves: bz1895316
  - [component] Add log verbosity from presets
    Resolves: bz1904045
  - [options] Fix --log-size=0 being ignored and unreported
    Resolves: bz1905657
  - [report] collect broken symlinks
    Resolves: bz1906598


author: Pavel Moravec <pmoravec@redhat.com> = 4.0-5
changelog:
  - [component] honour plugopts from config file
    Resolves: bz1912889
  - [collector] declare sysroot for each component
    Resolves: bz1912821
  - [plugins] Dont stop collecting by empty specfile when sizelimit=0
    Resolves: bz1912910


author: Pavel Moravec <pmoravec@redhat.com> = 4.0-7
changelog:
  - [kdump] Gather the file kexec-dmesg.log
    Resolves: bz1887402
  - [Policy] Handle additional FTP authentication issues
    Resolves: bz1916729


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 0.1-1
changelog:
  - Initial release: cloudlinux-default tuned profile for CloudLinux 7
  - AL-1741: IO scheduler configuration: set deadline for rotational devices and
             noop for SSD disks
  - AL-1888: disable tcache/tswap OpenVZ subsystems
  - AL-1889: increase nr_requests value to 1024


author: Konstantin Vaskovtsov <derkonstantin@cloudlinux.com> 0.1-10
changelog:
  - CAG-862: Add another profile: cloudlinux-latency-performance with min_perf_pct=100 and force_latency=1


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> 0.1-11
changelog:
  - CLKRN-698: add crashkernel=auto kernel parameter by default
  - CLKRN-709: fix force_latency for cloudlinux-latency-performance


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Sérgio Basto <sergio@serjux.com> - 2.8-1
changelog:
  - Update to 2.8 more 2 patches to fix builds on non-x86 and arm
    https://bitbucket.org/multicoreware/x265/issues/404/28-fails-to-build-on-ppc64le-gnu-linux
    https://bitbucket.org/multicoreware/x265/issues/406/arm-assembly-fail-to-compile-on-18


