<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-13566</id>
    <title> python-ruamel-yaml Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-08 00:00:00"/>
    <updated date="2022-03-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[0.16.6-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[0.16.6-7]
- Rebuilt for Python 3.10

[0.16.6-6]
- Change upstream URL
- Remove obsolete patch

[0.16.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[0.16.6-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[0.16.6-3]
- Rebuilt for Python 3.9

[0.16.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[0.16.6-1]
- Update to 0.16.6

[0.16.5-3]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[0.16.5-2]
- Added ruamel-yaml-clib as Requires

[0.16.5-1]
- Update to 0.16.5

[0.15.41-6]
- Rebuilt for Python 3.8

[0.15.41-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.15.41-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[0.15.41-3]
- Subpackage python2-ruamel-yaml has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[0.15.41-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.15.41-1]
- Update to 0.15.41
- Add patch not to require ruamel.std.pathlib

[0.13.14-4]
- Rebuilt for Python 3.7

[0.13.14-3]
- Update Python 2 dependency declarations to new packaging standards
  (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)

[0.13.14-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.13.14-1]
- Update to 0.13.14

[0.13.13-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[0.13.13-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0.13.13-3]
- The ruamel.yaml needs at least typing &gt;= 3.5.2.2
  related: #1386563

[0.13.13-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.13.13-1]
- Update to 0.13.13

[0.12.14-7]
- Add patch to support pytest 2.7 in EPEL7

[0.12.14-6]
- Rebuild for Python 3.6

[0.12.14-5]
- Require python34-typing on EPEL
- Ignore python2 test failure due to old pytest on EPEL7

[0.12.14-4]
- Build python3 package
- Run tests

[0.12.14-3]
- Disabling python3 as python3-ruamel-ordereddict not available

[0.12.14-2]
- Fixed python2-typing runtime dependency issue

[0.12.14-1]
- Initial package.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-13566.html" type="self" title="ELBA-2022-13566" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="python-ruamel-yaml" version="0.16.6" release="8.el8" epoch="0" arch="src">
          <filename>python-ruamel-yaml-0.16.6-8.el8.src.rpm</filename>
          <sum type="sha256">6a6d7a597431e0d6117910633cf2ac89427d5aae6fa64db779416d1d3c5429aa</sum>
        </package>
        <package name="python3-ruamel-yaml" version="0.16.6" release="8.el8" epoch="0" arch="aarch64">
          <filename>python3-ruamel-yaml-0.16.6-8.el8.aarch64.rpm</filename>
          <sum type="sha256">5ee1cc14b53f05f52e26bde7c5441f96f8de514807fb97d285a933d234f5a508</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-13567</id>
    <title> python-ruamel-yaml-clib Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-08 00:00:00"/>
    <updated date="2022-03-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[0.1.2-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[0.1.2-7]
- Rebuilt for Python 3.10

[0.1.2-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[0.1.2-5]
- Force regenerating C files from Cython sources
- Require python3-ruamel-yaml

[0.1.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[0.1.2-3]
- Rebuilt for Python 3.9

[0.1.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[0.1.2-1]
- Initial package</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-13567.html" type="self" title="ELBA-2022-13567" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="python3-ruamel-yaml-clib" version="0.1.2" release="8.el8" epoch="0" arch="aarch64">
          <filename>python3-ruamel-yaml-clib-0.1.2-8.el8.aarch64.rpm</filename>
          <sum type="sha256">0699a0cbbcb7640a9ac15ce2f6631e93474ed06a9b6f71f28f4f42fe98ed08aa</sum>
        </package>
        <package name="python-ruamel-yaml-clib" version="0.1.2" release="8.el8" epoch="0" arch="src">
          <filename>python-ruamel-yaml-clib-0.1.2-8.el8.src.rpm</filename>
          <sum type="sha256">5104aa3e8137f2eb1223a0efa731cf982a1059e40cb0de86f67732f46650561e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-2905</id>
    <title>gnome-settings-daemon bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-23 00:00:00"/>
    <updated date="2023-05-23 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[4.32.0-19]
- Make power-button-action default to poweroff on servers
- Resolves: #1920829

[3.32.0-18]
- Prevent automatic logout warning in greeter sessions
- Resolves: #2018606

[3.32.0-17]
- Make power-button-action respect the 'nothing' action on VMs
- Resolves: #2062051</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-2905.html" type="self" title="ELBA-2023-2905" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="gnome-settings-daemon" version="3.32.0" release="19.el8" epoch="0" arch="src">
          <filename>gnome-settings-daemon-3.32.0-19.el8.src.rpm</filename>
          <sum type="sha256">95451aa04a8e2fb30ea7144fe6a30b98f6efd6e89ec9ef49d373ca074e4b5b49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-15461</id>
    <title> lmdb-epel Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-07-11 00:00:00"/>
    <updated date="2021-07-11 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[0.9.24-2]
- Do not use lmdb-epel for Requires
- Related: rhbz#1973685

[0.9.24-1]
- Convert RHEL8 lmdb to lmdb-epel, with all subpackages except lmdb-libs
- Related: rhbz#1833564
- Related: rhbz#1972979

[0.9.24-1]
- RHEL 8.3.0 ERRATUM
- rebase to 0.9.24
- Resolves: rhbz#1817421

[0.9.23-5]
- fixed resolves from RPMDIFF
- fixed some covscan issues

[0.9.23-4]
- propagate ldflags for makefile
- added explicit Requires for -libs

[0.9.23-3]
- rebuild

[0.9.23-2]
- Initial Package
- Resolves: rhbz#1692264</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-15461.html" type="self" title="ELBA-2021-15461" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="lmdb" version="0.9.24" release="2.el8" epoch="0" arch="aarch64">
          <filename>lmdb-0.9.24-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6e68823a0ec5bd30a65b9d9be2d7ddcf284ab68f6dc8ff344f71785036194cc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4436</id>
    <title>libtalloc bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.3.2-1]
- resolves: rhbz#1945014 - Update to version 2.3.2</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4436.html" type="self" title="ELBA-2021-4436" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libtalloc" version="2.3.2" release="1.el8" epoch="0" arch="src">
          <filename>libtalloc-2.3.2-1.el8.src.rpm</filename>
          <sum type="sha256">1d03dfa17f5368ff2c517d438c0b7e61808274974ab67c475432c66774309345</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4435</id>
    <title>abrt bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>abrt
[2.10.9-20.0.1]
- Add orabug32082455-Upstream_reference_in_python3-abrt-addon.patch [Orabug: 32082455]
- Add bug29870394-fix-redhat-reference.patch [Orabug: 29870394]
- Drop libreport-rhel and libreport-plugin-rhtsupport requires

[2.10.9-20]
- Something something patch for rhbz#1835388

[2.10.9-19]
- Add another patch for #1846272

[2.10.9-18]
- Resolves: rhbz#1835388
- This is seccond commit to fix som mess with one missing patch and synchronize
  the internal gitlab patch numbers with this spec file

[2.10.9-17]
- Resolves: rhbz#1835388

[2.10.9-16]
- Add another patch for #1846272

[2.10.9-15]
- Remove unintended line change in abrt_event.conf

[2.10.9-14]
- Add patch for #1846272

[2.10.9-13]
- Resolves: rhbz#1658685
- shellcheck: Use command instead of type
- shellcheck: Check exit code directly with if mycmd
- shellcheck: Suppress shellcheck warning SC1090
- shellcheck: Use  instead of legacy backticked
- cli: Add a shebang

[2.10.9-12]
- Fix #1798494, #1805728, #1809949

gnome-abrt
[1.2.6-6]
- Add patch for rhbz#1791655

libreport
[2.9.5-15.0.1]
- Update workflow xml for Oracle [Orabug: 18945470]
- Add oracle-enterprise.patch and oracle-enterprise-po.patch
- Remove libreport-plugin-rhtsupport and libreport-rhel
- Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
- Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]
- libreport: unresolved deps python3-subscription-manager-rhsm [Orabug: 29386049]
- Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla

[2.9.5-15]
- Add patch for rhbz#1867064

[2.9.5-14]
- Add patch for #1860285

[2.9.5-13]
- Add patch for #1848903

[2.9.5-12]
- Resolves: rhbz#1835388 - abrt-addon-ccpp causes failures during openscap scans on CCE-27119-7
- This is just libreport side (abrt also needs to be patched)

[2.9.5-11]
- Add patch for #1822092</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4435.html" type="self" title="ELBA-2020-4435" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="abrt" version="2.10.9" release="20.0.1.el8" epoch="0" arch="src">
          <filename>abrt-2.10.9-20.0.1.el8.src.rpm</filename>
          <sum type="sha256">5dac0fb4de696bf32d4bc10834dd2bc8fd917b3d0ec7fb5931c2c475b58ad100</sum>
        </package>
        <package name="libreport" version="2.9.5" release="15.0.1.el8" epoch="0" arch="src">
          <filename>libreport-2.9.5-15.0.1.el8.src.rpm</filename>
          <sum type="sha256">4eb17086301c82de79cd4df747446bd27f80fe71c1b7cd0421e3cfa4a222d629</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-13569</id>
    <title> python-ruamel-yaml Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-08 00:00:00"/>
    <updated date="2022-03-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[0.16.6-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[0.16.6-7]
- Rebuilt for Python 3.10

[0.16.6-6]
- Change upstream URL
- Remove obsolete patch

[0.16.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[0.16.6-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[0.16.6-3]
- Rebuilt for Python 3.9

[0.16.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[0.16.6-1]
- Update to 0.16.6

[0.16.5-3]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[0.16.5-2]
- Added ruamel-yaml-clib as Requires

[0.16.5-1]
- Update to 0.16.5

[0.15.41-6]
- Rebuilt for Python 3.8

[0.15.41-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.15.41-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[0.15.41-3]
- Subpackage python2-ruamel-yaml has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[0.15.41-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.15.41-1]
- Update to 0.15.41
- Add patch not to require ruamel.std.pathlib

[0.13.14-4]
- Rebuilt for Python 3.7

[0.13.14-3]
- Update Python 2 dependency declarations to new packaging standards
  (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)

[0.13.14-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.13.14-1]
- Update to 0.13.14

[0.13.13-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[0.13.13-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0.13.13-3]
- The ruamel.yaml needs at least typing &gt;= 3.5.2.2
  related: #1386563

[0.13.13-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.13.13-1]
- Update to 0.13.13

[0.12.14-7]
- Add patch to support pytest 2.7 in EPEL7

[0.12.14-6]
- Rebuild for Python 3.6

[0.12.14-5]
- Require python34-typing on EPEL
- Ignore python2 test failure due to old pytest on EPEL7

[0.12.14-4]
- Build python3 package
- Run tests

[0.12.14-3]
- Disabling python3 as python3-ruamel-ordereddict not available

[0.12.14-2]
- Fixed python2-typing runtime dependency issue

[0.12.14-1]
- Initial package.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-13569.html" type="self" title="ELBA-2022-13569" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="python-ruamel-yaml" version="0.16.6" release="8.el8" epoch="0" arch="src">
          <filename>python-ruamel-yaml-0.16.6-8.el8.src.rpm</filename>
          <sum type="sha256">6a6d7a597431e0d6117910633cf2ac89427d5aae6fa64db779416d1d3c5429aa</sum>
        </package>
        <package name="python3-ruamel-yaml" version="0.16.6" release="8.el8" epoch="0" arch="aarch64">
          <filename>python3-ruamel-yaml-0.16.6-8.el8.aarch64.rpm</filename>
          <sum type="sha256">5ee1cc14b53f05f52e26bde7c5441f96f8de514807fb97d285a933d234f5a508</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-13570</id>
    <title> python-ruamel-yaml-clib Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-03-08 00:00:00"/>
    <updated date="2022-03-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[0.1.2-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[0.1.2-7]
- Rebuilt for Python 3.10

[0.1.2-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[0.1.2-5]
- Force regenerating C files from Cython sources
- Require python3-ruamel-yaml

[0.1.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[0.1.2-3]
- Rebuilt for Python 3.9

[0.1.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[0.1.2-1]
- Initial package</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-13570.html" type="self" title="ELBA-2022-13570" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="python3-ruamel-yaml-clib" version="0.1.2" release="8.el8" epoch="0" arch="aarch64">
          <filename>python3-ruamel-yaml-clib-0.1.2-8.el8.aarch64.rpm</filename>
          <sum type="sha256">0699a0cbbcb7640a9ac15ce2f6631e93474ed06a9b6f71f28f4f42fe98ed08aa</sum>
        </package>
        <package name="python-ruamel-yaml-clib" version="0.1.2" release="8.el8" epoch="0" arch="src">
          <filename>python-ruamel-yaml-clib-0.1.2-8.el8.src.rpm</filename>
          <sum type="sha256">5104aa3e8137f2eb1223a0efa731cf982a1059e40cb0de86f67732f46650561e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-7604</id>
    <title>libtimezonemap bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[0.4.5.1-4]
- Remove regions from the map
  Resolves: rhbz#2097833</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-7604.html" type="self" title="ELBA-2022-7604" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libtimezonemap" version="0.4.5.1" release="4.el8" epoch="0" arch="src">
          <filename>libtimezonemap-0.4.5.1-4.el8.src.rpm</filename>
          <sum type="sha256">849340a38c3abfc1a38843b89b59c4b96c4c2fc3c96a45dd2bdf0f78ea93d3ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4447</id>
    <title>lldpad bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.0.1-16.git036e314]
- Update the changelog

[1.0.1-15.git036e314]
- Fix the branch compatibility

[1.0.1-14.git036e314]
- Update to branch-1.1 compatibility
- Fixes to avoid assert in the agent state machine
- Remove the memory constraint on the event socket buffer (#1554110)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4447.html" type="self" title="ELBA-2021-4447" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="lldpad" version="1.0.1" release="16.git036e314.el8" epoch="0" arch="src">
          <filename>lldpad-1.0.1-16.git036e314.el8.src.rpm</filename>
          <sum type="sha256">2f9a6c11bfa5c6932104ec3bd58e35fb31b99c80efea85599d4b128cfd2819ad</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4459</id>
    <title>procps-ng bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[3.3.15-3]
- pgrep: uid/gid conversion overflow
- vmstat: align manpage with procfs wording
- watch: manpage presumes NTP on system
- Resolves: rhbz#1827731
- Resolves: rhbz#1829920
- Resolves: rhbz#1583669

[3.3.15-2]
- pidof: show kernel workers
- gating activated
- Resolves: rhbz#1803640</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4459.html" type="self" title="ELBA-2020-4459" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="procps-ng" version="3.3.15" release="3.el8" epoch="0" arch="src">
          <filename>procps-ng-3.3.15-3.el8.src.rpm</filename>
          <sum type="sha256">5b32d52101521c2f22a16e16d29f8385df4718dbcb80d6062829080ad1e5d170</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-2897</id>
    <title> jbig2dec security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-07-14 00:00:00"/>
    <updated date="2020-07-14 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.14-4]
- Add explicit package version requirement on jbig2dec-libs to jbig2dec
  related: #1851057

[0.14-3]
- Fix CVE-2020-12268
  resolves: #1851057</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-2897.html" type="self" title="ELSA-2020-2897" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12268.html" id="CVE-2020-12268" type="cve" title="CVE-2020-12268" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="jbig2dec" version="0.14" release="4.el8_2" epoch="0" arch="src">
          <filename>jbig2dec-0.14-4.el8_2.src.rpm</filename>
          <sum type="sha256">9d9617510c1ddd12d84f9a02d9811f2d66a1974dd712efc96bd83ae0e701427e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-3055</id>
    <title>pacemaker bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-23 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[2.1.7-5.0.1]
- Upstream reference in pacemaker crm_report binary [Orabug: 32825154]
- Replace bug url [Orabug: 34202300]

[2.1.7-5]
- Fix upgrading to this package on multilib systems
- Resolves: RHEL-29007

[2.1.7-4]
- Properly validate attribute set type in pacemaker-attrd
- Fix crm_attribute -t nodes --node localhost
- Resolves: RHEL-14045
- Resolves: RHEL-17224
- Resolves: RHEL-23065

[2.1.7-3]
- Rebase on upstream 2.1.7 final release
- Fix documentation for Pacemaker Remote schema transfers
- Do not check CIB feature set version when CIB_file is set
- Consolidate attrd cache handling
- Avoid duplicating option metadata across daemons
- Related: RHEL-7597
- Related: RHEL-14045

[2.1.7-2]
- Rebase on upstream 2.1.7-rc4 release
- Pacemaker Remote nodes can validate against later schema versions
- Resolves: RHEL-7597
- Related: RHEL-17224

[2.1.7-1]
- Rebase on upstream 2.1.7-rc2 release
- Resolves: RHEL-7646
- Related: RHEL-17224</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-3055.html" type="self" title="ELBA-2024-3055" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="pacemaker" version="2.1.7" release="5.0.1.el8_10" epoch="0" arch="src">
          <filename>pacemaker-2.1.7-5.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">8c5b51a4a7365d252c3e9719e4a7ddd7b7a1e2c83c0a95433b38d11202cec10c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4467</id>
    <title>e2fsprogs bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.45.6-2]
- Fix internal configuration pseudo file (#1889464)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4467.html" type="self" title="ELBA-2021-4467" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="e2fsprogs" version="1.45.6" release="2.el8" epoch="0" arch="src">
          <filename>e2fsprogs-1.45.6-2.el8.src.rpm</filename>
          <sum type="sha256">493264ab623e9d0081f7436e295eb0b234cd76680112dcdece67f19bb6a1e0b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1733</id>
    <title>libndp bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.7-5]
- Bump the version number due to conflict with (rhbz 1933041)

[1.7-4]
- libndp,ndptool: use poll() instead of select (rhbz 1937721)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1733.html" type="self" title="ELBA-2021-1733" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libndp" version="1.7" release="5.el8" epoch="0" arch="src">
          <filename>libndp-1.7-5.el8.src.rpm</filename>
          <sum type="sha256">7b86978abad6346dfaad8e6fe7740606128bb044f7a0c4ebed6529bd4568a580</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-7636</id>
    <title>edk2 bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[20220126gitbb1bba3d77-3]
- Bumping OpenSSL version [bz# 2074834]
- Resolves: bz# 2074834
  (edk2: sync openssl sources with rhel openssl rpm)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-7636.html" type="self" title="ELBA-2022-7636" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20220126gitbb1bba3d77" release="3.el8" epoch="0" arch="src">
          <filename>edk2-20220126gitbb1bba3d77-3.el8.src.rpm</filename>
          <sum type="sha256">35f80d3e19e99b1d15993b6e585d5ec6cb08340e7396b8ff3559307ec77e313a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-15496</id>
    <title> lmdb-epel Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-07-11 00:00:00"/>
    <updated date="2021-07-11 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[0.9.24-2]
- Do not use lmdb-epel for Requires
- Related: rhbz#1973685

[0.9.24-1]
- Convert RHEL8 lmdb to lmdb-epel, with all subpackages except lmdb-libs
- Related: rhbz#1833564
- Related: rhbz#1972979

[0.9.24-1]
- RHEL 8.3.0 ERRATUM
- rebase to 0.9.24
- Resolves: rhbz#1817421

[0.9.23-5]
- fixed resolves from RPMDIFF
- fixed some covscan issues

[0.9.23-4]
- propagate ldflags for makefile
- added explicit Requires for -libs

[0.9.23-3]
- rebuild

[0.9.23-2]
- Initial Package
- Resolves: rhbz#1692264</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-15496.html" type="self" title="ELBA-2021-15496" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="lmdb" version="0.9.24" release="2.el8" epoch="0" arch="aarch64">
          <filename>lmdb-0.9.24-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6e68823a0ec5bd30a65b9d9be2d7ddcf284ab68f6dc8ff344f71785036194cc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4509</id>
    <title>librepo bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.12.0-2]
- Validate paths read from repomd.xml (RhBug:1866505)

[1.12.0-1]
- Update to 1.12.0
- Decode package URL when using for local filename (RhBug:1817130)
- Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
- Download sources work when at least one of specified is working (RhBug:1775184)
- Enable building on OSX

[1.11.3-1]
- Update to 1.11.3
 - Prefer mirrorlist/metalink over baseurl (RhBug:1775184)
 - Fix calling Python API without holding GIL (RhBug:1788918)
 - Do not unref LrErr_Exception on exit (RhBug:1778854)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4509.html" type="self" title="ELBA-2020-4509" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="librepo" version="1.12.0" release="2.el8" epoch="0" arch="src">
          <filename>librepo-1.12.0-2.el8.src.rpm</filename>
          <sum type="sha256">f53e772b1164585db48bcfe00b5bc6fcccb529accf79dde80d17e85a94d291b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5485</id>
    <title>xdg-desktop-portal bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-12-17 00:00:00"/>
    <updated date="2020-12-17 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.6.0-3]
- Fix OpenURI crash (#1886776)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5485.html" type="self" title="ELBA-2020-5485" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="xdg-desktop-portal" version="1.6.0" release="3.el8_3" epoch="0" arch="src">
          <filename>xdg-desktop-portal-1.6.0-3.el8_3.src.rpm</filename>
          <sum type="sha256">9cef61420faf60a44811682e56c06177a7fca5c41a2529ca6e40d8ee46cb1e99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4512</id>
    <title>libteam bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.31-2]
- Revert 'teamd: Disregard current state when considering port enablement' [1874001]

[1.31-1]
- 1.31 release
- utils/bond2team: remove TYPE in ifcfg file [1858518]
- utils/bond2team: keep delivering config to file if stdout not supplied [1858518]
- teamd/lacp: silence ignore none LACP frames
- Send LACP PDU right after the Actor state has been changed
- Skip setting the same hwaddr to a lag port if not needed
- Make all netlink socket RCVBUF sizes configurable
- Dont return an error when timerfd socket return 0
- Fix ifinfo_link_with_port race condition with newlink
- teamd: fix possible race in master ifname callback
- 1.30 release
- teamd: Disregard current state when considering port enablement [1851460]

[1.29-5]
- teamd: fix ctx-&gt;hwaddr value assignment [1838952]

[1.29-4]
- gating: fix the invalid ovs rpm link with latest version [1782427]

[1.29-3]
- gating: fix the invalid ovs rpm link [1782427]

[1.29-2]
- teamd/lacp: fix segfault due to NULL pointer dereference [1758073]
- teamd: fix build error in expansion of macro teamd_log_dbgx [1758073]
- teamd: update ctx-&gt;hwaddr after setting team dev to new hwaddr
- libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758073]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4512.html" type="self" title="ELBA-2020-4512" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libteam" version="1.31" release="2.el8" epoch="0" arch="src">
          <filename>libteam-1.31-2.el8.src.rpm</filename>
          <sum type="sha256">e6d8121132897802f54b64fa8feb085013cc20b5524cb64dac420970870448a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-2956</id>
    <title>libteam bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-23 00:00:00"/>
    <updated date="2023-05-23 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[1.31-4]
- teamd: do no remove the ports on shutdown with -N [2148856]
- teamd: stop iterating callbacks when a loop restart is requested [2148855]

[1.31-3]
- libteamdctl: validate the bus name before using it [2065227]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-2956.html" type="self" title="ELBA-2023-2956" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libteam" version="1.31" release="4.el8" epoch="0" arch="src">
          <filename>libteam-1.31-4.el8.src.rpm</filename>
          <sum type="sha256">06100240f98f719254488ab9ce8236c9ae04671af94be0430add8b669b155be1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4493</id>
    <title>libqmi bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.24.0-3]
- fix crash in qmi_endpoint_is_open() (rh #1976888)

[1.24.0-2]
- fix crash and detect QMI port over smdpkt subsystem (rh #1976886)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4493.html" type="self" title="ELBA-2021-4493" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libqmi" version="1.24.0" release="3.el8" epoch="0" arch="src">
          <filename>libqmi-1.24.0-3.el8.src.rpm</filename>
          <sum type="sha256">3bbf7810de1a8c55d6015d7e46f08fd85772092902cce431b9975444af63425e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-6941</id>
    <title>marisa bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-17 00:00:00"/>
    <updated date="2023-11-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[0.2.4-38]
- Resolves:rh#2180735 - move marisa-devel in rhel8 CRB repository
  also fix missing gating test execution

[0.2.4-37]
- Resolves:rh#2180735 - move marisa-devel in rhel8 CRB repository</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-6941.html" type="self" title="ELBA-2023-6941" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="marisa" version="0.2.4" release="38.el8" epoch="0" arch="src">
          <filename>marisa-0.2.4-38.el8.src.rpm</filename>
          <sum type="sha256">a34b35a52a56e44bad7e63713536a07235ebf8d39a51b567db66aa1880f8ecae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4505</id>
    <title>mobile-broadband-provider-info bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[20210805-1]
- Update to latest upstream release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4505.html" type="self" title="ELBA-2021-4505" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="mobile-broadband-provider-info-devel" version="20210805" release="1.el8" epoch="0" arch="noarch">
          <filename>mobile-broadband-provider-info-devel-20210805-1.el8.noarch.rpm</filename>
          <sum type="sha256">3b7cb2c9088aa2fb1148865caf90eecb52f814f0ef47f7410d70df6c40d58b30</sum>
        </package>
        <package name="mobile-broadband-provider-info" version="20210805" release="1.el8" epoch="0" arch="src">
          <filename>mobile-broadband-provider-info-20210805-1.el8.src.rpm</filename>
          <sum type="sha256">3a3f1328103cbffd02edc5892f3843dba2f15dadacb3e925ce470b3134c43abd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-2976</id>
    <title>lmdb bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-23 00:00:00"/>
    <updated date="2023-05-23 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[0.9.24-2]
RHEL 8.8.0 ERRATUM
- Please put lmdb in RHEL 8 CRB
- Rebuild
- Resolves: rhbz#1972979</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-2976.html" type="self" title="ELBA-2023-2976" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="lmdb" version="0.9.24" release="2.el8" epoch="0" arch="src">
          <filename>lmdb-0.9.24-2.el8.src.rpm</filename>
          <sum type="sha256">cc294905678faad9d092b26d248e4935e7a2f35d1722d52ed7ddc6fa04c1bf05</sum>
        </package>
        <package name="lmdb" version="0.9.24" release="2.el8" epoch="0" arch="aarch64">
          <filename>lmdb-0.9.24-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6e68823a0ec5bd30a65b9d9be2d7ddcf284ab68f6dc8ff344f71785036194cc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-7127</id>
    <title>sssd bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-17 00:00:00"/>
    <updated date="2023-11-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.9.1-2.0.1]
- Restore default debug level for sss_cache [Orabug: 32810448]

[2.9.1-2]
- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system

[2.9.1-1]
- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
- Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
- Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
- Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
- Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
- Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
- Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
- Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
- Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
- Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'

[2.9.0-4]
- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
  Rebuild against rebased Samba libs

[2.9.0-3]
- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9

[2.9.0-1]
- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
- Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
- Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
- Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
- Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
- Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or 'make filtering of the domains more configurable')
- Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #

[2.8.2-2]
- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in 'Request to sssd failed. Device or resource busy'

[2.8.2-1]
- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
- Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
- Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
- Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
- Resolves: rhbz#2142795 - SSSD: sssctl analyze command shouldn't require 'root' privileged
- Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
- Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)

[2.8.1-1]
- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
- Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
- Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
- Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user's password when option ldap_pwd_policy equals to shadow in sssd.conf file
- Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (krb5_validate and pac_check settings conflict)
- Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed

[2.7.3-5]
- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
  Rebuild against Samba rebase.

[2.7.3-4]
- Resolves: rhbz#2116395 - NFS krb5 mount failed as 'access denied' after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8

[2.7.3-3]
- Resolves: rhbz#2116395 - NFS krb5 mount failed as 'access denied' after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend

[2.7.3-2]
- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL

[2.7.3-1]
- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization

[2.7.2-1]
- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression 'Missing internal domain data.' when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol

[2.7.0-2]
- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language

[2.6.2-3]
- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol 'krb5_unmarshal_credentials' only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization

[2.6.2-2]
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)

[2.6.2-1]
- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol 'krb5_unmarshal_credentials' only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing 'includedir /var/lib/sss/pubconf/krb5.include.d' directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization

[2.6.1-2]
- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release

[2.6.1-1]
- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
- Resolves: rhbz#1952569 - SSSD should use 'hidden' temporary file in its krb locator
- Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
- Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
- Resolves: rhbz#2021196 - Make backtrace less 'chatty' (avoid duplicate backtraces)
- Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
- Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
- Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
- Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
- Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing

[2.5.2-2]
- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization

[2.5.2-1]
- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for originalADgidNumber
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade

[2.5.1-2]
- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)

[2.5.1-1]
- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf

[2.5.0-1]
- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels('first factor' / 'second factor') on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify 'single_prompt' option in 'PROMPTING CONFIGURATION SECTION' section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive

[2.4.0-8]
- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)

[2.4.0-7]
- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11

[2.4.0-6]
- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)

[2.4.0-5]
- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication

[2.4.0-4]
- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
- Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
- Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently

[2.4.0-3]
- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
- Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
- Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior

[2.4.0-2]
- This is to bump version to allow rebuild against rebased libldb.

[2.4.0-1]
- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
- Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
- Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
- Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
- Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
- Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
- Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
- Resolves: rhbz#1846778 - [RfE] /usr/libexec/sssd/p11_child cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
- Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
- Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
- Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter 'ldap_referrals'
- Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
- Resolves: rhbz#1884196 - [RFE] Add 'enabled' option to domain section in config file
- Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
- Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
- Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
- Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate

[2.3.0-9]
- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied

[2.3.0-8]
- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
- Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
- Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
- Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1

[2.3.0-7]
- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with 'sssctl config-check' command.
- Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter

[2.3.0-6]
- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization

[2.3.0-5]
- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
- Fixed 'requires/provides' rpmdiff warning

[2.3.0-4]
- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
- Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
- Resolves: rhbz#1803134 - Improve 'unlock' time when user session already active

[2.3.0-3]
- Resolves: rhbz#1829470 - sssd.api.conf and sssd.api.d should belong to python-sssdconfig package
- Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
- Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after 'files' provider rebuilds cache
- Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                           inotify events, and no updates are triggered
- Resolves: rhbz#1835710 - Change the message 'Please enter smart card' to 'Please insert smart card'
                           on GDM login with smart-card
- Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
- Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
- Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                           if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                           in SSSD-AD direct integration.
- Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
- Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma

[2.3.0-2]
- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with 'sssctl config-check' command.

[2.3.0-1]
- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
- Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
- Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on 'yum update' which breaks working

[2.2.3-19]
- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                           certificate EKU and perform an action based
                           on value when generating SSH key from a certificate
                           (additional patch)

[2.2.3-19]
- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                           information

[2.2.3-18]
- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                           certificate EKU and perform an action based
                           on value when generating SSH key from a certificate

[2.2.3-17]
- Resolves: rhbz#1718193 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module
                           does not implement it properly

[2.2.3-16]
- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                           omitted and auth_provider is krb5

[2.2.3-15]
- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization

[2.2.3-14]
- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                           specified up to the seconds

[2.2.3-13]
- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools

[2.2.3-12]
* Resolves: rhbz#1794016 - sssd_be frequent crash

[2.2.3-11]
* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider

[2.2.3-10]
* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap
                           connection timeout

[2.2.3-9]
* Resolves: rhbz#1783190 - [abrt] [faf] sssd:
                           raise(): /usr/libexec/sssd/sssd_autofs killed by 6

[2.2.3-8]
* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect

[2.2.3-7]
* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect

[2.2.3-6]
* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized

[2.2.3-5]
* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character
                           for match rules sss-certmap

[2.2.3-4]
* Resolves: rhbz#1781728 - sssctl config-check command does not give proper
                           error messages with line numbers

[2.2.3-3]
* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
            Increasing version number to pick latest libldb

[2.2.3-2]
* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
            PART2: Fix gating issue.

[2.2.3-1]
* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release

[2.2.2-1]
* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release

[2.2.0-19]
- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)

[2.2.0-18]
- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master

[2.2.0-17]
- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue

[2.2.0-16]
- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup

[2.2.0-15]
- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided

[2.2.0-14]
- Resolves: rhbz#1736796 - sssd config option 'default_domain_suffix'
                           should not cause files domain entries to be
                           qualified, this can break sudo access

[2.2.0-13]
- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8

[2.2.0-12]
- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets

[2.2.0-11]
- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user

[2.2.0-10]
- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                           the trailing colon

[2.2.0-9]
- Resolves: rhbz#1382750 - Conflicting default timeout values

[2.2.0-8]
- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder
                           repository
                         - This just required a raise in release number
                           and changelog for the record.

[2.2.0-7]
- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is
                           not FIPS140 compliant

[2.2.0-6]
- Resolves: rhbz#1726945 - negative cache does not use values from
                           'filter_users' config option for known domains

[2.2.0-5]
- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo

[2.2.0-4]
- Resolves: rhbz#1283798 - sssd failover does not work on connecting to
                           non-responsive ldaps:// server

[2.2.0-3]
- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with
                           no members

[2.2.0-2]
- Resolves: rhbz#1673443 - sssd man pages: The default value of
                           'ldap_user_home_directory' is not mentioned
                           with AD server configuration

[2.2.0-1]
- Resolves: rhbz#1687281
  Rebase sssd in RHEL-8.1 to the latest upstream release

[2.1.0-1]
- Resolves: rhbz#1687281
  Rebase sssd in RHEL-8.1 to the latest upstream release

[2.0.0-45]
- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is
  done here in order to unblock gating changes before rebase.
- Related: rhbz#1682305

[2.0.0-43]
- Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                           card maps to multiple users

[2.0.0-42]
- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                           of gen_new to avoid a subsequent switch call
                           failure

[2.0.0-41]
-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                          subdomain service name being used

[2.0.0-40]
-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                          UnknownProperty: Unknown property

[2.0.0-39]
- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                           1.x, this can result in time outs

[2.0.0-38]
- Resolves: rhbz#1578014 - sssd does not work under non-root user
- Note: Actually the patches were in the 2.0.0-37, this one just adds this
        changelog because it was missing.

[2.0.0-36]
- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                           suggests using * for backend sss

[2.0.0-35]
- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist

[2.0.0-34]
- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                           kdestroy caused by KCM returning a wrong error
                           code during the delete operation

[2.0.0-33]
- Resolves: rhbz#1646113 - Missing concise documentation about valid options
                           for sssd-files-provider

[2.0.0-32]
- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc
            and libtevent to avoid an issue in GPO processing

[2.0.0-31]
- Resolves: 1658813 - PKINIT with KCM does not work

[2.0.0-30]
- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to
                      retrieve AD users through IPA Trust

[2.0.0-29]
- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise():
                           /usr/libexec/sssd/proxy_child killed by 6

[2.0.0-28]
- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories

[2.0.0-27]
- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI

[2.0.0-26]
- Resolves: rhbz#1657980 - sssd_nss memory leak

[2.0.0-25]
- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly
                           for D-bus, resulting in a crash

[2.0.0-24]
- Resolves: rhbz#1646168 - sssctl access-report always prints an error message
- Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the
                           configuration without having to restart the whole
                           sssd
- Resolves: rhbz#1640576 - sssctl reports incorrect information about local
                           user's cache entry expiration time
- Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user
- Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys

[2.0.0-23]
- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui
                           with smart card

[2.0.0-22]
- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA

[2.0.0-21]
- Related: rhbz#1638150 - session not recording for local user when groups defined
- Also add silence a Coverity warning, which is related to rhbz#1637131

[2.0.0-20]
- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules

[2.0.0-19]
- Add OSCP checks for p11_child
- Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                          users

[2.0.0-18]
- Related: rhbz#1638006 - Files: The files provider always enumerates
                          which causes duplicate when running getent passwd

[2.0.0-17]
- Related: rhbz#1637131 - pam_unix unable to match fully qualified username
                          provided by sssd during smartcard auth using gdm

[2.0.0-16]
- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a
                          PKCS#11 URI

[2.0.0-15]
- Related: rhbz#1611011 - Support for 'require smartcard for login option'

[2.0.0-14]
- Related: rhbz#1635595 - Cant login with smartcard with multiple certs

[2.0.0-13]
- Backport more sbus2 fixes
- Related: rhbz#1623878 - crash related to sbus_router_destructor()

[2.0.0-12]
- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD

[2.0.0-11]
- Resolves: rhbz#1628122 - Printing incorrect information about domain
                           with sssctl utility

[2.0.0-10]
- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not
                           started due to a misconfiguration

[2.0.0-9]
- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del
                           commands in man pages since local provider
                           is deprecated

[2.0.0-8]
- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function():
                            /usr/libexec/sssd/sssd_be killed by 11 crash
                            func _dbus_list_unlink

[2.0.0-7]
- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it
                           differs from the default

[2.0.0-6]
- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup

[2.0.0-5]
- Resolves: rhbz#1615590 - Do not rely on 'python' for el8

[2.0.0-4]
- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                           users

[2.0.0-3]
- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()

[2.0.0-2]
- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication
                           fails with the KCM ccache

[2.0.0-1]
- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version

[1.16.2-2]
- Switch hardcoded python3 shebangs into the %{__python3} macro

[1.16.2-1]
- Update to 1.16.2 release
- Cleanup unused global definitions
- Remove python2 references from the spec file
- Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x

[1.16.1-3]
- Resolves: upstream#3684 - A group is not updated if its member is removed
                            with the cleanup task, but the group does not
                            change
- Resolves: upstream#3558 - sudo: report error when two rules share cn
- Tone down shutdown messages for socket activated responders
- IPA: Qualify the externalUser sudo attribute
- Resolves: upstream#3550 - refresh_expired_interval does not work with
                            netgrous in 1.15
- Resolves: upstream#3402 - Support alternative sources for the files provider
- Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
- Resolves: upstream#3679 - Make nss netgroup requests more robust
- Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                            configured
- Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                            processing
- Improve docs/debug message about GC detection
- Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                            list out of bound?
- Resolves: upstream#2653 - Group renaming issue when 'id_provider = ldap' is
                            set.
- Document which principal does the AD provider use
- Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                            defined, but contains no SIDs
- Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
- Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                           Provider returned an error
                           [org.freedesktop.sssd.Error.DataProvider.Fatal]

[1.16.1-2]
- Resolves: upstream#3573 - sssd won't show netgroups with blank domain
- Resolves: upstream#3660 - confdb_expand_app_domains() always fails
- Resolves: upstream#3658 - Application domain is not interpreted correctly
- Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                            json_loads()
- Resolves: upstream#3386 - KCM: Payload buffer is too small
- Resolves: upstream#3666 - Fix usage of str.decode() in our tests
- A few KCM misc fixes

[1.16.1-1]
- New upstream release 1.16.1
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html

[1.16.0-13]
- Resolves: upstream#3621 - backport bug found by static analyzers

[1.16.0-12]
- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Resolves: upstream#3621 - FleetCommander integration must not require
                            capability DAC_OVERRIDE

[1.16.0-11]
- Resolves: upstream#3618 - selinux_child segfaults in a docker container

[1.16.0-10]
- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl

[1.16.0-9]
- Fix systemd executions/requirements

[1.16.0-8]
- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS

[1.16.0-7]
- Fix building of sssd-nfs-idmap with libnfsidmap.so.1

[1.16.0-6]
- Rebuilt for libnfsidmap.so.1

[1.16.0-5]
- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                            setnetgrent_result_timeout
- Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                            or machine swaps
- Resolves: failure in glibc tests
            https://sourceware.org/bugzilla/show_bug.cgi?id=22530
- Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                            auth_provider ldap, login fails if the LDAP server
                            is not allowing anonymous binds
- Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                            corrected with AD
- Resolves: upstream#3586 - Give a more detailed debug and system-log message
                            if krb5_init_context() failed
- Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                           in /etc/systemd/system
- Backport few upstream features from 1.16.1

[1.16.0-4]
- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next

[1.16.0-3]
- Backport extended NSS API from upstream master branch

[1.16.0-2]
- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade

[1.16.0-1]
- New upstream release 1.16.0
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html

[1.15.3-5]
- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database access on
                           the sock_file system_bus_socket

[1.15.3-4]
- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
                           access on the sock_file system_bus_socket
- Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                           fails to download desktop profile data
- Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
- Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
                            after applying ID Views for them in IPA server
- Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
                            mapping is applied

[1.15.3-3]
- Backport few upstream patches/fixes

[1.15.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.15.3-1]
- New upstream release 1.15.3
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html

[1.15.3-0.beta.5]
- Rebuild with libldb-1.2.0

[1.15.3-0.beta.4]
- Fix build issues: Update expided certificate in unit tests

[1.15.3-0.beta.3]
- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
- Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                           file from package sssd-common-1.15.1-1.fc25.x86_64
- Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4

[1.15.3-0.beta.2]
- Fix issue with IPA + SELinux in containers
- Resolves: upstream https://fedorahosted.org/sssd/ticket/3297

[1.15.3-0.beta.1]
- Backport upstream patches for 1.15.3 pre-release
- required for building freeipa-4.5.x in rawhide

[1.15.2-1]
- New upstream release 1.15.2
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html

[1.15.1-1]
- New upstream release 1.15.1
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html

[1.15.0-4]
- Cherry-pick patches from upstream that enable the files provider
- Enable the files domain
- Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch
  which is superseded by the files domain autoconfiguration
- Related: rhbz#1357418 - SSSD fast cache for local users

[1.15.0-3]
- Add missing %license macro

[1.15.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.15.0-1]
- New upstream release 1.15.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0

[1.14.2-3]
- Rebuild for Python 3.6

[1.14.2-2]
- Resolves: rhbz#1369130 - nss_sss should not link against libpthread
- Resolves: rhbz#1392916 - sssd failes to start after update
- Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                           on the directory /etc/sssd

[1.14.2-1]
- New upstream release 1.14.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2

[1.14.1-4]
- libwbclient-sssd: update interface to version 0.13

[1.14.1-3]
- Fix regression with krb5_map_user
- Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
- Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                           default if nonexistent domain is mentioned

[1.14.1-2]
- Backport important patches from upstream 1.14.2 prerelease
- Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                             boot
- Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14

[1.14.1-1]
- New upstream release 1.14.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1

[1.14.0-5]
- Add workaround patch for RHBZ #1366403

[1.14.0-4]
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages

[1.14.0-3]
- New upstream release 1.14.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0

[1.14.0-2.beta]
- New upstream release 1.14 beta
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta

[1.14.0-1.alpha]
- New upstream release 1.14 alpha
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha

[1.13.4-3]
- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
                           sssd_ifp killed by SIGSEGV

[1.13.4-2]
- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6

[1.13.4-1]
- New upstream release 1.13.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4

[1.13.3-6]
- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
                           prompts (e.g. Password + Token)
- Resolves: rhbz#1313041 - ssh with sssd proxy fails with 'Connection closed
                           by remote host' if locale not available

[1.13.3-5]
- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
                           groups during getgrnam and getgrgid
- Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                           in call to 'print'

[1.13.3-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.13.3-3]
- Additional upstream fixes

[1.13.3-2]
- Resolves: rhbz#1256849 - SUDO: Support the IPA schema

[1.13.3-1]
- New upstream release 1.13.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3

[1.13.2-1]
- New upstream release 1.13.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2

[1.13.1-5]
- Rebuilt for Python3.5 rebuild

[1.13.1-4]
- Fix building pac responder with the krb5-1.14

[1.13.1-3]
- python-sssdconfig: Fix parssing sssd.conf without config_file_version
- Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed

[1.13.1-2]
- Fix few segfaults
- Resolves: upstream #2811 - PAM responder crashed if user was not set
- Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step

[1.13.1-1]
- New upstream release 1.13.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1

[1.13.0-6]
- Fix OTP bug
- Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                             entered separately

[1.13.0-5]
- Backport upstream patches required by FreeIPA 4.2.1

[1.13.0-4]
- Fix ipa-migration bug
- Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                             migration mode

[1.13.0-3]
- New upstream release 1.13.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0

[1.13.0-2.alpha]
- Unify return type of list_active_domains for python{2,3}

[1.13.0-1.alpha]
- New upstream release 1.13 alpha
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha

[1.12.5-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.12.5-3]
- Fix libwbclient alternatives

[1.12.5-2]
- Backport important patches from upstream 1.13 prerelease

[1.12.5-1]
- New upstream release 1.12.5
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5

[1.12.4-8]
- Backport important patches from upstream 1.13 prerelease
- Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                           attribute for group name
- Resolves: upstream #2335 - Investigate using the krb5 responder
                             for driving the PAM conversation with OTPs
- Enable cmocka tests for secondary architectures

[1.12.4-7]
- Backport patches from upstream 1.12.5 prerelease - contains many fixes

[1.12.4-6]
- Fix slow login with ipa and SELinux
- Resolves: upstream #2624 - Only set the selinux context if the context
                             differs from the local one

[1.12.4-5]
- Fix regressions with ipa and SELinux
- Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u

[1.12.4-4]
- Also relax libldb Requires
- Remove --enable-ldb-version-check

[1.12.4-3]
- Relax libldb BuildRequires to be greater-or-equal

[1.12.4-2]
- Add support for python3 bindings
- Add requirement to python3 or python3 bindings
- Resolves: rhbz#1014594 - sssd: Support Python 3

[1.12.4-1]
- New upstream release 1.12.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4

[1.12.3-7]
- Backport patches with Python3 support from upstream

[1.12.3-6]
- Fix double free in monitor
- Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                        sssd killed by SIGABRT

[1.12.3-5]
- Rebuild for new libldb

[1.12.3-4]
- Decrease priority of sssd-libwbclient 20 -&gt; 5
- It should be lower than priority of samba veriosn of libwbclient.
- https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18

[1.12.3-3]
- Apply a number of patches from upstream to fix issues found 1.12.3
- Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                           interfaces, or isn't documented to be able to
- Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                          not running
- Resolves: upstream #2557  authentication failure with user from AD

[1.12.3-2]
- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
- Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                           zipping when rotating logfile

[1.12.3-1]
- New upstream release 1.12.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
- Fix spelling errors in description (fedpkg lint)

[1.12.2-8]
- Rebuild for libldb 1.1.19

[1.12.2-7]
- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                           crash in wbinfo
                           - in addition to the patch libwbclient.so is
                             filtered out of the Provides list of the package

[1.12.2-6]
- Fix regressions and bugs in sssd upstream 1.12.2
- https://fedorahosted.org/sssd/ticket/{id}
- Regressions: #2471, #2475, #2483, #2487, #2529, #2535
- Bugs: #2287, #2445

[1.12.2-5]
- Rebuild for libldb 1.1.18

[1.12.2-4]
- Fix typo in libwbclient-devel %preun

[1.12.2-3]
- Use alternatives for libwbclient

[1.12.2-2]
- Backport several patches from upstream.
- Fix a potential crash against old (pre-4.0) IPA servers

[1.12.2-1]
- New upstream release 1.12.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2

[1.12.1-2]
- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                           private group from server

[1.12.1-1]
- New upstream release 1.12.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1

[1.12.0-7]
- Do not crash on resolving a group SID in IPA server mode

[1.12.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.12.0-5]
- Fix release version for upgrades

[1.12.0-1]
- New upstream release 1.12.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0

[1.12.0-4.beta2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.12.0-1.beta2]
- New upstream release 1.12 beta2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2

[1.12.0-2.beta1]
- Fix tests on big-endian
- Fix previous changelog entry

[1.12.0-1.beta1]
- New upstream release 1.12 beta1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1

[1.11.5.1-4]
- Rebuild against new ding-libs

[1.11.5.1-3]
- Make LDB dependency a strict equivalency

[1.11.5.1-2]
- Rebuild against new libldb

[1.11.5.1-1]
- New upstream release 1.11.5.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1

[1.11.5-2]
- Fix bug in generation of systemd unit file

[1.11.5-1]
- New upstream release 1.11.5
- Remove upstreamed patch
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5

[1.11.4-3]
- Handle new error code for IPA password migration

[1.11.4-2]
- Include couple of patches from upstream 1.11 branch

[1.11.4-1]
- New upstream release 1.11.4
- Remove upstreamed patch
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4

[1.11.3-2]
- Handle OTP response from FreeIPA server gracefully

[1.11.3-1]
- New upstream release 1.11.3
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3

[1.11.2-1]
- New upstream release 1.11.2
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2

[1.11.1-5]
- Fix potential crash with external groups in trusted IPA-AD setup

[1.11.1-4]
- Add plugin for cifs-utils
- Resolves: rhbz#998544

[1.11.1-3]
- Fix failover from Global Catalog to LDAP in case GC is not available

[1.11.1-2]
- Remove the ability to create public ccachedir (#1015089)

[1.11.1-1]
- New upstream release 1.11.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1

[1.11.0-3]
- Fix multicast checks in the SSSD
- Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                           code getting the host info

[1.11.0-2]
- Backport simplification of ccache management from 1.11.1
- Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login

[1.11.0-1]
- New upstream release 1.11.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0

[1.11.0-0.4.beta2]
- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
                      Process /usr/libexec/sssd/sssd_nss was killed by
                      signal 11 (SIGSEGV)
- Resolves: #996214 - sssd proxy_child segfault

[1.11.0-0.3.beta2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.11.0.2beta2]
- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                      pam libraries

[1.11.0.1beta2]
- New upstream release 1.11 beta 2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2

[1.10.1-1]
- New upstream release 1.10.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1

[1.10.0-17]
- sssd-tools should require sssd-common, not sssd

[1.10.0-16]
- Move sssd_pac to the sssd-ipa and sssd-ad subpackages
- Trim out RHEL5-specific macros since we don't build on RHEL 5
- Trim out macros for Fedora older than F18
- Update libldb requirement to 1.1.16
- Trim RPM changelog down to the last year

[1.10.0-15]
- Move sssd_pac to the sssd-krb5 subpackage

[1.10.0-14]
- Fix Obsoletes: to account for dist tag
- Convert post and pre scripts to run on the sssd-common subpackage
- Remove old conversion from SYSV

[1.10.0-13]
- New upstream release 1.10
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0

[1.10.0-12.beta2]
- the cmocka toolkit exists only on selected arches

[1.10.0-11.beta2]
- Apply a number of patches from upstream to fix issues found post-beta,
  in particular:
  -- segfault with a high DEBUG level
  -- Fix IPA password migration (upstream #1873)
  -- Fix fail over when retrying SRV resolution (upstream #1886)

[1.10.0-10.beta2]
- Only BuildRequire libcmocka on Fedora

[1.10.0-9.beta2]
- Fix typo in Requires that prevented an upgrade (#973916)
- Use a hardcoded version in Conflicts, not less-than-current

[1.10.0-8.beta1]
- Enable hardened build for RHEL7

[1.10.0-8.beta2]
- New upstream release 1.10 beta2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
- BuildRequire libcmocka-devel in order to run all upstream tests during build
- BuildRequire libnl3 instead of libnl1
- No longer BuildRequire initscripts, we no longer use /sbin/service
- Remove explicit krb5-libs &gt;= 1.10 requires; this platform doensn't carry any
  older krb5-libs version

[1.10.0-7.beta1]
- Apply a couple of patches from upstream git that resolve crashes when
  ID mapping object was not initialized properly but needed later

[1.10.0-6.beta1]
- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                          realm join
- Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                          default for AD Provider
- Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                          parent directory when logging in

[1.10.0-5.beta1]
- BuildRequire recent libini_config to ensure consistent behaviour

[1.10.0-4.beta1]
- Explicitly Require libini_config &gt;= 1.0.0.1 to work around a SONAME bug
  in ding-libs
- Fix SSH integration with fully-qualified domains
- Add the ability to dynamically discover the NetBIOS name

[1.10.0-3.beta1]
- New upstream release 1.10 beta1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1

[1.10.0-2.alpha1]
- Add a patch to fix krb5 ccache creation issue with krb5 1.11

[1.10.0-1.alpha1]
- New upstream release 1.10 alpha1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1

[1.9.5-10]
- Add a patch to fix krb5 unit tests

[1.9.4-9]
- Split internal helper libraries into a shared object
- Significantly reduce disk-space usage

[1.9.4-8]
- Fix the Kerberos password expiration warning (#912223)

[1.9.4-7]
- Do not write out dots in the domain-realm mapping file (#905650)

[1.9.4-6]
- Include upstream patch to build with krb5-1.11

[1.9.4-5]
- Rebuild against new libldb

[1.9.4-4]
- Fix build with new automake versions

[1.9.4-3]
- Recreate Kerberos ccache directory if it's missing
- Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                          directory /run/user/UID/ccdir does not exist

[1.9.4-2]
- Fix changelog dates to make F19 rpmbuild happy

[1.9.4-1]
- New upstream release 1.9.4

[1.9.3-1]
- New upstream release 1.9.3

[1.9.2-5]
- Resolve groups from AD correctly

[1.9.2-4]
- Check the validity of naming context

[1.9.2-3]
- Move the sss_cache tool to the main package

[1.9.2-2]
- Include the 1.9.2 tarball

[1.9.2-1]
- New upstream release 1.9.2

[1.9.1-1]
- New upstream release 1.9.1

[1.9.0-24]
- require the latest libldb

[1.9.0-24]
- Use mcpath insted of mcachepath macro to be consistent with
  upsteam spec file

[1.9.0-23]
- New upstream release 1.9.0

[1.9.0-22.rc1]
- New upstream release 1.9.0 rc1

[1.9.0-21.beta7]
- New upstream release 1.9.0 beta7
- obsoletes patches #1-#3

[1.9.0-20.beta6]
- Rebuild against libldb 1.12

[1.9.0-19.beta6]
- Rebuild against libldb 1.11

[1.9.0-18.beta6]
- Change the default ccache location to DIR:/run/user/1000/krb5cc
  and patch man page accordingly
- Resolves: rhbz#851304

[1.9.0-17.beta6]
- Rebuild against libldb 1.10

[1.9.0-16.beta6]
- Only create the SELinux login file if there are SELinux mappings on
  the IPA server

[1.9.0-14.beta6]
- Don't discard HBAC rule processing result if SELinux is on
  Resolves: rhbz#846792 (CVE-2012-3462)

[1.9.0-13.beta6]
- New upstream release 1.9.0 beta 6
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
- A new option, override_shell was added. If this option is set, all users
  managed by SSSD will have their shell set to its value.
- Fixes for the support for setting default SELinux user context from FreeIPA.
- Fixed a regression introduced in beta 5 that broke LDAP SASL binds
- The SSSD supports the concept of a Primary Server and a Back Up Server in
  failover
- A new command-line tool sss_seed is available to help prime the cache with
  a user record when deploying a new machine
- SSSD is now able to discover and save the domain-realm mappings
  between an IPA server and a trusted Active Directory server.
- Packaging changes to fix ldconfig usage in subpackages (#843995)
- Rebuild against libldb 1.1.9

[1.9.0-13.beta5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[1.9.0-12.beta5]
- New upstream release 1.9.0 beta 5
- Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
- Many fixes for the support for setting default SELinux user context from
  FreeIPA, most notably fixed the specificity evaluation
- Fixed an incorrect default in the krb5_canonicalize option of the AD
  provider which was preventing password change operation
- The shadowLastChange attribute value is now correctly updated with the
  number of days since the Epoch, not seconds

[1.9.0-11.beta4]
- Fix broken ARM build
- Add missing DP_OPTION_TERMINATOR in AD provider options

[1.9.0-10.beta4]
- Own several directories create during make install (#839782)

[1.9.0-9.beta4]
- New upstream release 1.9.0 beta 4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
- Add a new AD provider to improve integration with Active Directory 2008 R2
  or later servers
- SUDO integration was completely rewritten. The new implementation works
  with multiple domains and uses an improved refresh mechanism to download
  only the necessary rules
- The IPA authentication provider now supports subdomains
- Fixed regression for setups that were setting default_tkt_enctypes
  manually by reverting a previous workaround.

[1.9.0-8.beta3]
- New upstream release 1.9.0 beta 3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
- Add a new PAC responder for dealing with cross-realm Kerberos trusts
- Terminate idle connections to the NSS and PAM responders

[1.9.0-7.beta2]
- Switch unicode library from libunistring to Glib
- Drop unnecessary explicit Requires on keyutils
- Guarantee that versioned Requires include the correct architecture

[1.9.0-6.beta2]
- Fix accidental disabling of the DIR cache support

[1.9.0-5.beta2]
- New upstream release 1.9.0 beta 2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
- Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
- Major performance enhancement when storing large groups in the cache
- Major performance enhancement when performing initgroups() against Active
  Directory
- SSSDConfig data file default locations can now be set during configure for
  easier packaging

[1.9.0-4.beta1]
- Fix regression in endianness patch

[1.9.0-3.beta1]
- Rebuild SSSD against ding-libs 0.3.0beta1
- Fix endianness bug in service map protocol

[1.9.0-2.beta1]
- Fix several regressions since 1.5.x
- Ensure that the RPM creates the /var/lib/sss/mc directory
- Add support for Netscape password warning expiration control
- Rebuild against libldb 1.1.6

[1.9.0-1.beta1]
- New upstream release 1.9.0 beta 1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
- Add native support for autofs to the IPA provider
- Support for ID-mapping when connecting to Active Directory
- Support for handling very large (&gt; 1500 users) groups in Active Directory
- Support for sub-domains (will be used for dealing with trust relationships)
- Add a new fast in-memory cache to speed up lookups of cached data on
  repeated requests

[1.8.3-11]
- New upstream release 1.8.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
- Numerous manpage and translation updates
- LDAP: Handle situations where the RootDSE isn't available anonymously
- LDAP: Fix regression for users using non-standard LDAP attributes for user
  information

[1.8.2-10]
- New upstream release 1.8.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
- Several fixes to case-insensitive domain functions
- Fix for GSSAPI binds when the keytab contains unrelated principals
- Fixed several segfaults
- Workarounds added for LDAP servers with unreadable RootDSE
- SSH knownhostproxy will no longer enter an infinite loop preventing login
- The provided SYSV init script now starts SSSD earlier at startup and stops
  it later during shutdown
- Assorted minor fixes for issues discovered by static analysis tools

[1.8.1-9]
- Don't duplicate libsss_autofs.so in two packages
- Set explicit package contents instead of globbing

[1.8.1-8]
- Fix uninitialized value bug causing crashes throughout the code
- Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup

[1.8.1-7]
- New upstream release 1.8.1
- Resolve issue where we could enter an infinite loop trying to connect to an
  auth server
- Fix serious issue with complex (3+ levels) nested groups
- Fix netgroup support for case-insensitivity and aliases
- Fix serious issue with lookup bundling resulting in requests never
  completing
- IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
  in addition to pam_authenticate
- Fix several regressions in the proxy provider
- Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                          against AD
- Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work

[1.8.0-6]
- New upstream release 1.8.0
- Support for the service map in NSS
- Support for setting default SELinux user context from FreeIPA
- Support for retrieving SSH user and host keys from LDAP (Experimental)
- Support for caching autofs LDAP requests (Experimental)
- Support for caching SUDO rules (Experimental)
- Include the IPA AutoFS provider
- Fixed several memory-corruption bugs
- Fixed a regression in group enumeration since 1.7.0
- Fixed a regression in the proxy provider
- Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
- Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                          logged at each login
- Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                          /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
- Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                          against AD
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                          new LDAP features
- Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc

[1.8.0-5.beta3]
- Change default kerberos credential cache location to /run/user/&lt;username&gt;

[1.8.0-4.beta3]
- New upstream release 1.8.0 beta 3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
- Fixed a regression in group enumeration since 1.7.0
- Fixed several memory-corruption bugs
- Finalized the ABI for the autofs support
- Fixed a regression in the proxy provider

[1.8.0-3.beta2]
- Rebuild against PCRE 8.30

[1.8.0-1.beta2]
- New upstream release
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
- Fix two minor manpage bugs
- Include the IPA AutoFS provider

[1.8.0-1.beta1]
- New upstream release
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
- Support for the service map in NSS
- Support for setting default SELinux user context from FreeIPA
- Support for retrieving SSH user and host keys from LDAP (Experimental)
- Support for caching autofs LDAP requests (Experimental)
- Support for caching SUDO rules (Experimental)

[1.7.0-5]
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                          new LDAP features - fix netgroups and sudo as well

[1.7.0-4]
- Fixes a serious memory hierarchy bug causing unpredictable behavior in the
  LDAP provider.

[1.7.0-3]
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                          new LDAP features

[1.7.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[1.7.0-1]
- New upstream release 1.7.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
- Support for case-insensitive domains
- Support for multiple search bases in the LDAP provider
- Support for the native FreeIPA netgroup implementation
- Reliability improvements to the process monitor
- New DEBUG facility with more consistent log levels
- New tool to change debug log levels without restarting SSSD
- SSSD will now disconnect from LDAP server when idle
- FreeIPA HBAC rules can choose to ignore srchost options for significant
  performance gains
- Assorted performance improvements in the LDAP provider

[1.6.4-1]
- New upstream release 1.6.4
- Rolls up previous patches applied to the 1.6.3 tarball
- Fixes a rare issue causing crashes in the failover logic
- Fixes an issue where SSSD would return the wrong PAM error code for users
  that it does not recognize.

[1.6.3-5]
- Rebuild against libldb 1.1.4

[1.6.3-4]
- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                          username in getpwnam()
- Resolves: rhbz#758425 - LDAP failover not working if server refuses
                          connections

[1.6.3-3]
- Rebuild for libldb 1.1.3

[1.6.3-2]
- Resolves: rhbz#752495 - Crash when apply settings

[1.6.3-1]
- New upstream release 1.6.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
- Fixes a major cache performance issue introduced in 1.6.2
- Fixes a potential infinite-loop with certain LDAP layouts

[1.6.2-5]
- Rebuilt for glibc bug#747377

[1.6.2-4]
- Change selinux policy requirement to Conflicts: with the old version,
  rather than Requires: the supported version.

[1.6.2-3]
- Add explicit requirement on selinux-policy version to address new SBUS
  symlinks.

[1.6.2-2]
- Remove %files reference to sss_debuglevel copied from wrong upstreeam
  spec file.

[1.6.2-1]
- Improved handling of users and groups with multi-valued name attributes
  (aliases)
- Performance enhancements
    Initgroups on RFC2307bis/FreeIPA
    HBAC rule processing
- Improved process-hang detection and restarting
- Enabled the midpoint cache refresh by default (fewer cache misses on
  commonly-used entries)
- Cleaned up the example configuration
- New tool to change debug level on the fly

[1.6.1-1]
- New upstream release 1.6.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
- Fixes a serious issue with LDAP connections when the communication is
  dropped (e.g. VPN disconnection, waking from sleep)
- SSSD is now less strict when dealing with users/groups with multiple names
  when a definitive primary name cannot be determined
- The LDAP provider will no longer attempt to canonicalize by default when
  using SASL. An option to re-enable this has been provided.
- Fixes for non-standard LDAP attribute names (e.g. those used by Active
  Directory)
- Three HBAC regressions have been fixed.
- Fix for an infinite loop in the deref code

[1.6.0-2]
- Build with _hardened_build macro

[1.6.0-1]
- New upstream release 1.6.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
- Add host access control support for LDAP (similar to pam_host_attr)
- Finer-grained control on principals used with Kerberos (such as for FAST or
- validation)
- Added a new tool sss_cache to allow selective expiring of cached entries
- Added support for LDAP DEREF and ASQ controls
- Added access control features for Novell Directory Server
- FreeIPA dynamic DNS update now checks first to see if an update is needed
- Complete rewrite of the HBAC library
- New libraries: libipa_hbac and libipa_hbac-python

[1.5.11-2]
- New upstream release 1.5.11
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
- Fix a serious regression that prevented SSSD from working with ldaps:// URIs
- IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
- address being saved to the AAAA record

[1.5.10-1]
- New upstream release 1.5.10
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
- Fixed a regression introduced in 1.5.9 that could result in blocking calls
- to LDAP

[1.5.9-1]
- New upstream release 1.5.9
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
- Support for overriding home directory, shell and primary GID locally
- Properly honor TTL values from SRV record lookups
- Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
- servers)
- Properly escape IPv6 addresses in the failover code
- Do not crash if inotify fails (e.g. resource exhaustion)
- Don't add multiple TGT renewal callbacks (too many log messages)

[1.5.8-1]
- New upstream release 1.5.8
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
- Support for the LDAP paging control
- Support for multiple DNS servers for name resolution
- Fixes for several group membership bugs
- Fixes for rare crash bugs

[1.5.7-3]
- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
- Make sure to properly convert to systemd if upgrading from newer
- updates for Fedora 14

[1.5.7-2]
- Fix segfault in TGT renewal

[1.5.7-1]
- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
-                         cached password with predicatable filename

[1.5.6.1-1]
- Re-add manpage translations

[1.5.6-1]
- New upstream release 1.5.6
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
- Fixed a serious memory leak in the memberOf plugin
- Fixed a regression with the negative cache that caused it to be essentially
- nonfunctional
- Fixed an issue where the user's full name would sometimes be removed from
- the cache
- Fixed an issue with password changes in the kerberos provider not working
- with kpasswd

[1.5.5-5]
- Resolves: rhbz#697057 - kpasswd fails when using sssd and
-                         kadmin server != kdc server
- Upgrades from SysV should now maintain enabled/disabled status

[1.5.5-4]
- Fix %postun

[1.5.5-3]
- Fix systemd conversion. Upgrades from SysV to systemd weren't properly
- enabling the systemd service.
- Fix a serious memory leak in the memberOf plugin
- Fix an issue where the user's full name would sometimes be removed
- from the cache

[1.5.5-2]
- Install systemd unit file instead of sysv init script

[1.5.5-1]
- New upstream release 1.5.5
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
- Fixes for several crash bugs
- LDAP group lookups will no longer abort if there is a zero-length member
- attribute
- Add automatic fallback to 'cn' if the 'gecos' attribute does not exist

[1.5.4-1]
- New upstream release 1.5.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
- Fixes for Active Directory when not all users and groups have POSIX attributes
- Fixes for handling users and groups that have name aliases (aliases are ignored)
- Fix group memberships after initgroups in the IPA provider

[1.5.3-2]
- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication

[1.5.3-1]
- New upstream release 1.5.3
- Support for libldb &gt;= 1.0.0

[1.5.2-1]
- New upstream release 1.5.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
- Fixes for support of FreeIPA v2
- Fixes for failover if DNS entries change
- Improved sss_obfuscate tool with better interactive mode
- Fix several crash bugs
- Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
- Delete users from the local cache if initgroups calls return 'no such user'
- (previously only worked for getpwnam/getpwuid)
- Use new Transifex.net translations
- Better support for automatic TGT renewal (now survives restart)
- Netgroup fixes

[1.5.1-9]
- Rebuild sssd against libldb 1.0.2 so the memberof module loads again.
- Related: rhbz#677425

[1.5.1-8]
- Resolves: rhbz#677768 - name service caches names, so id command shows
-                         recently deleted users

[1.5.1-7]
- Ensure that SSSD builds against libldb-1.0.0 on F15 and later
- Remove .la for memberOf

[1.5.1-6]
- Fix memberOf install path

[1.5.1-5]
- Add support for libldb 1.0.0

[1.5.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[1.5.1-3]
- Fix nested group member filter sanitization for RFC2307bis
- Put translated tool manpages into the sssd-tools subpackage

[1.5.1-2]
- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during
- rpmbuild

[1.5.1-1]
- New upstream release 1.5.1
- Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
- Vast performance improvements when enumerate = true
- All PAM actions will now perform a forced initgroups lookup instead of just
- a user information lookup
-   This guarantees that all group information is available to other
-   providers, such as the simple provider.
- For backwards-compatibility, DNS lookups will also fall back to trying the
- SSSD domain name as a DNS discovery domain.
- Support for more password expiration policies in LDAP
-    389 Directory Server
-    FreeIPA
-    ActiveDirectory
- Support for ldap_tls_{cert,key,cipher_suite} config options
-Assorted bugfixes

[1.5.0-2]
- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins

[1.5.0-1]
- New upstream release 1.5.0
- Fixed issues with LDAP search filters that needed to be escaped
- Add Kerberos FAST support on platforms that support it
- Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
- Added a Kerberos access provider to honor .k5login
- Addressed several thread-safety issues in the sss_client code
- Improved support for delayed online Kerberos auth
- Significantly reduced time between connecting to the network/VPN and
- acquiring a TGT
- Added feature for automatic Kerberos ticket renewal
- Provides the kerberos ticket for long-lived processes or cron jobs
- even when the user logs out
- Added several new features to the LDAP access provider
- Support for 'shadow' access control
- Support for authorizedService access control
- Ability to mix-and-match LDAP access control features
- Added an option for a separate password-change LDAP server for those
- platforms where LDAP referrals are not supported
- Added support for manpage translations

[1.4.1-3]
- Solve a shutdown race-condition that sometimes left processes running
- Resolves: rhbz#606887 - SSSD stops on upgrade

[1.4.1-2]
- Log startup errors to the syslog
- Allow cache cleanup to be disabled in sssd.conf

[1.4.1-1]
- New upstream release 1.4.1
- Add support for netgroups to the proxy provider
- Fixes a minor bug with UIDs/GIDs &gt;= 2^31
- Fixes a segfault in the kerberos provider
- Fixes a segfault in the NSS responder if a data provider crashes
- Correctly use sdap_netgroup_search_base

[1.4.0-2]
- Fix incorrect tarball URL

[1.4.0-1]
- New upstream release 1.4.0
- Added support for netgroups to the LDAP provider
- Performance improvements made to group processing of RFC2307 LDAP servers
- Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
- Build-system improvements to support Gentoo
- Split out several libraries into the ding-libs tarball
- Manpage reviewed and updated

[1.3.0-35]
- Fix pre and post script requirements

[1.3.0-34]
- Resolves: rhbz#606887 - sssd stops on upgrade

[1.3.0-33]
- Resolves: rhbz#626205 - Unable to unlock screen

[1.3.0-32]
- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
-                         doesn't require it

[1.3.0-31]
- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib

[1.3.0-30]
- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
-                           against LDAP

[1.2.91-21]
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild

[1.2.91-20]
- New upstream version 1.2.91 (1.3.0rc1)
- Improved LDAP failover
- Synchronous sysdb API (provides performance enhancements)
- Better online reconnection detection

[1.2.1-15]
- New stable upstream version 1.2.1
- Resolves: rhbz#595529 - spec file should eschew %define in favor of
-                         %global
- Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
-                         to fail while restart.
- Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
-                         keyring
- Resolves: rhbz#599724 - sssd is broken on Rawhide

[1.2.0-12]
- New stable upstream version 1.2.0
- Support ServiceGroups for FreeIPA v2 HBAC rules
- Fix long-standing issue with auth_provider = proxy
- Better logging for TLS issues in LDAP

[1.1.92-11]
- New LDAP access provider allows for filtering user access by LDAP attribute
- Reduced default timeout for detecting offline status with LDAP
- GSSAPI ticket lifetime made configurable
- Better offline-&gt;online transition support in Kerberos

[1.1.91-10]
- Release new upstream version 1.1.91
- Enhancements when using SSSD with FreeIPA v2
- Support for deferred kinit
- Support for DNS SRV records for failover

[1.1.1-3]
- Bump up release number to avoid library sub-packages version issues with
  previous releases.

[1.1.1-1]
- New upstream release 1.1.1
- Fixed the IPA provider (which was segfaulting at start)
- Fixed a bug in the SSSDConfig API causing some options to revert to
- their defaults
- This impacted the Authconfig UI
- Ensure that SASL binds to LDAP auto-retry when interrupted by a signal

[1.1.0-2]
- Release SSSD 1.1.0 final
- Fix two potential segfaults
- Fix memory leak in monitor
- Better error message for unusable confdb

[1.1.0-1.pre20100317git0ea7f19]
- Release candidate for SSSD 1.1
- Add simple access provider
- Create subpackages for libcollection, libini_config, libdhash and librefarray
- Support IPv6
- Support LDAP referrals
- Fix cache issues
- Better feedback from PAM when offline

[1.0.5-2]
- Rebuild against new libtevent

[1.0.5-1]
- Fix licenses in sources and on RPMs

[1.0.4-1]
- Fix regression on 64-bit platforms

[1.0.3-1]
- Fixes link error on platforms that do not do implicit linking
- Fixes double-free segfault in PAM
- Fixes double-free error in async resolver
- Fixes support for TCP-based DNS lookups in async resolver
- Fixes memory alignment issues on ARM processors
- Manpage fixes

[1.0.2-1]
- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
- Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
- Several segfault bugfixes

[1.0.1-1]
- Fix CVE-2010-0014

[1.0.0-2]
- Patch SSSDConfig API to address
- https://bugzilla.redhat.com/show_bug.cgi?id=549482

[1.0.0-1]
- New upstream stable release 1.0.0

[0.99.1-1]
- New upstream bugfix release 0.99.1

[0.99.0-1]
- New upstream release 0.99.0

[0.7.1-1]
- Fix segfault in sssd_pam when cache_credentials was enabled
- Update the sample configuration
- Fix upgrade issues caused by data provider service removal

[0.7.0-2]
- Fix upgrade issues from old (pre-0.5.0) releases of SSSD

[0.7.0-1]
- New upstream release 0.7.0

[0.6.1-2]
- Fix missing file permissions for sssd-clients

[0.6.1-1]
- Add SSSDConfig API
- Update polish translation for 0.6.0
- Fix long timeout on ldap operation
- Make dp requests more robust

[0.6.0-1]
- Ensure that the configuration upgrade script always writes the config
  file with 0600 permissions
- Eliminate an infinite loop in group enumerations

[0.6.0-0]
- New upstream release 0.6.0

[0.5.0-0]
- New upstream release 0.5.0

[0.4.1-4]
- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
  without a password. (Patch by Stephen Gallagher)

[0.4.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[0.4.1-2]
- Fix a couple of segfaults that may happen on reload

[0.4.1-1]
- add missing configure check that broke stopping the daemon
- also fix default config to add a missing required option

[0.4.1-0]
- latest upstream release.
- also add a patch that fixes debugging output (potential segfault)

[0.3.2-2]
- release out of the official 0.3.2 tarball

[0.3.2-1]
- bugfix release 0.3.2
- includes previous release patches
- change permissions of the /etc/sssd/sssd.conf to 0600

[0.3.1-2]
- Add last minute bug fixes, found in testing the package

[0.3.1-1]
- Version 0.3.1
- includes previous release patches

[0.3.0-2]
- Try to fix build adding automake as an explicit BuildRequire
- Add also a couple of last minute patches from upstream

[0.3.0-1]
- Version 0.3.0
- Provides file based configuration and lots of improvements

[0.2.1-1]
- Version 0.2.1

[0.2.0-1]
- Version 0.2.0

[0.1.0-5.20090309git691c9b3]
- package git snapshot

[0.1.0-4]
- fixed items found during review
- added initscript

[0.1.0-3]
- added sss_client

[0.1.0-2]
- Small cleanup and fixes in the spec file

[0.1.0-1]
- Initial release (based on version 0.1.0 upstream code)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-7127.html" type="self" title="ELBA-2023-7127" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="sssd" version="2.9.1" release="2.0.1.el8" epoch="0" arch="src">
          <filename>sssd-2.9.1-2.0.1.el8.src.rpm</filename>
          <sum type="sha256">29b4d7e3481761b47c32cfaa8bd3bb0270ad4dea101e1776d2716d29c1d240f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12343</id>
    <title>edk2 security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-04-24 00:00:00"/>
    <updated date="2024-04-24 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>* Tue Feb 27 2024 Aaron Young
- Create new 20240227 release for OL8 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}

* Tue Aug 22 2023 Aaron Young
- Create new 20230822.cvm release for OL8</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12343.html" type="self" title="ELSA-2024-12343" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36763.html" id="CVE-2022-36763" type="cve" title="CVE-2022-36763" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36764.html" id="CVE-2022-36764" type="cve" title="CVE-2022-36764" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36765.html" id="CVE-2022-36765" type="cve" title="CVE-2022-36765" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45229.html" id="CVE-2023-45229" type="cve" title="CVE-2023-45229" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45230.html" id="CVE-2023-45230" type="cve" title="CVE-2023-45230" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45231.html" id="CVE-2023-45231" type="cve" title="CVE-2023-45231" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45232.html" id="CVE-2023-45232" type="cve" title="CVE-2023-45232" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45233.html" id="CVE-2023-45233" type="cve" title="CVE-2023-45233" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45234.html" id="CVE-2023-45234" type="cve" title="CVE-2023-45234" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45235.html" id="CVE-2023-45235" type="cve" title="CVE-2023-45235" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20240227" release="5.el8" epoch="1" arch="src">
          <filename>edk2-20240227-5.el8.src.rpm</filename>
          <sum type="sha256">241ab2257953cd7c570aca2262dd31802e2cd18a85bc8c9e70b7b75270136d6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2021-4234</id>
    <title>mesa and related packages bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>egl-wayland
[1.1.7-1]
- Update to 1.1.7 (#1975862)

libdrm
[2.4.106-2]
- Fixup requires for devel packages

[2.4.106-1]
- Update to 2.4.106

libepoxy
[1.5.8-1]
- libepoxy 1.5.8 (rhbz#1976780)

mesa
[21.1.5-1]
- Fix vulkan sw with wayland, pull in .4 + .5 fixes

[21.1.3-1]
- rebase to 21.1.3

[21.1.1-2]
- rebuild against llvm 12

[21.1.1-1]
- Update to 21.1.1

[20.3.3-1]
- Update to 20.3.3 + upstream fixes for qemu regression

[20.3.2-1]
- Update to 20.3.2 for upstream fixes

[20.3.1-1]
- Update to 20.3.1 for radeon fix

[20.3.0-2]
- Fix regression with radeon si/cik cards

[20.3.0-1]
- Update to 20.3.0 release

[20.3.0-0.1.rc2]
- Update 20.3.0-rc2
- enable lavapipe behind env var so it can be used for testing

[20.1.4-1]
- Update to 20.1.4
- Update nouveau tu1xx support patch (Karol)

[20.1.2-3]
- a fix on top of the big-endian fix (#1847064)

[20.1.2-2]
- add another fix for big-endian llvmpipe (#1847064)

[20.1.2-1]
- Update to 20.1.2
- add fix for big-endian llvmpipe (#1847064)

[20.1.1-1]
- Update to 20.1.1
- Add support for turing

[20.1.0-1]
- Update to 20.1.0 final

[20.1.0-0.1.rc4]
- Update to 20.1.0-rc4

[19.3.4-2]
- Fix put image shm fallback path.

[19.3.4-1]
- Update to 19.3.4 release (s390x fix)

[19.3.3-1]
- Update to 19.3.3 release

[19.3.0-3]
- drop khr-devel subpackage from here

[19.3.0-2]
- sort out libglvnd requires

[19.3.0-1]
- mesa-19.3.0-rc4

[19.1.4-2]
- Add CET support to asm files

[19.1.4-1]
- mesa-19.1.4

[19.1.0-0.5]
- mesa-19.1.0-rc5

[19.1.0-0.4]
- mesa-19.1.0-rc4

[19.1.0-0.3]
- mesa-19.1.0-rc3
- disable asserts explicitly

[19.1.0-0.2]
- mesa 19.1.0-rc2
- bring back glesv2.pc

[19.1.0-0.1]
- mesa 19.1.0-rc1

[18.3.1-5]
- Fix remote shm detection again

[18.3.1-4]
- Fix remove shm detection

[18.3.1-3]
- Add shm leak fix

[18.3.1-2]
- fix shm swrast

[18.3.1-1]
- Mesa 18.3.1 - move to release

* Wed Dec 12 2018 Tom Stellard &lt;tstellar@redhat.com&gt;
- Rebuild for LLVM 7.0.1

[18.3.0-0.2]
- Mesa 18.3.0 RC2
- Drop python3 build system backport
- Drop no-longer-necessary big-endian build fix
- Re-enable 10bpc fbconfigs

[18.2.2-1]
- Mesa 18.2.2

[18.2.1-1]
- Mesa 18.2.1
- Fix 'HW cursor for format' error message flood with swrast

[18.2.0-2]
- Drop unneeded BuildRequires: makedepend

[18.2.0-1]
- mesa 18.2.0

[18.1.3-4]
- Fix crash on screen resolution change
  Resolves: #1616390

[18.1.3-3]
- Rebuild for LLVM 6.0

[18.1.3-2]
- rename fallback for glvnd

[18.1.3-1]
- Mesa 18.1.3

[18.1.2-2]
- Disable arm-specific drivers
- Use alternate glvnd indirect library name

[18.1.2-1]
- Mesa 18.1.2

[18.0.5-1]
- Mesa 18.0.5

[18.0.3-1]
- Mesa 18.0.3
- Disable old drivers: radeon, r200, r300, i915, vieux

[18.0.2-2]
- Disable omx/opencl/nine

[18.0.2-1]
- Mesa 18.0.2

[17.3.6-2]
- Use llvm-toolset

[17.3.6-1]
- Update to 17.3.6

[17.3.5-2]
- Backport patch to fix video corruption

[17.3.5-1]
- Update to 17.3.5

[17.3.4-1]
- Update to 17.3.4

[17.3.3-1]
- Update to 17.3.3

[17.3.1-1]
- Update to 17.3.1

[17.3.0-0.4.rc3]
- Sanitize tarball

[17.3.0-0.3.rc3]
- Update to 17.3.0-rc3

[17.3.0-0.1.rc2]
- Update to 17.3.0-rc2

[17.2.4-1]
- Update to 17.2.4 GA

[17.2.3-2]
- Rebuild for LLVM 5.0.0

[17.2.3-1]
- 17.2.3, bugfix release.

[17.2.2-4]
- Fix for vc4/Raspberry Pi

[17.2.2-3]
- enable vulkan on 32-bit x86

[17.2.2-2]
- Backport S3TC support from master

[17.2.2-1]
- Update to 17.2.2 GA

[17.2.1-1]
- Update to 17.2.1 GA

[17.2.0-2]
- Add upstream patch for glibc xlocale.h change (fdo bz 102454)

[17.2.0-1]
- Update to 17.2.0 GA

[17.2.0-0.3.rc6]
- Update to 17.2.0-rc6

[17.2.0-0.2.rc5]
- Update to 17.2.0-rc5

[17.2.0-0.1.rc4]
- Update to 17.2.0-rc4

[17.1.5-1.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[17.1.5-1.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[7.1.5-1]
- Update to 17.1.5

* Thu Jul 13 2017 Adam Jackson &lt;ajax@redhat.com&gt;
- Stop replacing eglext.h, were up to date again

[7.1.4-1]
- Update to 17.1.4

[7.1.3-2]
- Fixes and perf improvements for vc4

[7.1.3-1]
- Update to 17.1.3

[7.1.2-2]
- Some etnaviv fixes

[7.1.2-1]
- Update to 17.1.2

[17.1.1-2]
- Disable BGRA8 images on Fermi

[17.1.1-1]
- Update to 17.1.1

[17.1.0-1]
- Update to 17.1.0

[17.1.0-0.4.rc4]
- Update to 17.1.0-rc4

[17.1.0-0.3.rc2]
- Enable renderonly support for i.MX SoC (rhbz #1424714)

[17.1.0-0.2.rc2]
- Update to 17.1.0-rc2

[17.1.0-0.1.rc1]
- Update to 17.1.0-rc1

[17.0.3-1]
- Update to 17.0.3

[17.0.2-2]
- Rebuild for LLVM4

[17.0.2-1]
- Update to 17.0.2

[17.0.1-3]
- Fix glXGetDriverConfig not working with glvnd (rhbz#1429894)
- Fix indirect rendering, add libGLX_indirect.so.0 symlink (rhbz#1427174)

[17.0.1-2]
- Rebuild for aarch64 llvmpipe fix (rhbz 1429050)

[17.0.1-1]
- Update to 17.0.1

[17.0.0-1]
- 17.0.0 GA

[17.0.0-0.6.rc3]
- Update to 17.0.0-rc3

[17.0.0-0.5.rc2]
- Fix GLX_SGIX_fbconfig extension dispatching with glvnd, this fixes games such
  as 'The Binding of Isaac: Rebirth' and 'Crypt of the NecroDancer' from Steam

[17.0.0-0.4.rc2]
- Update eglext.h to 20161230 version this brings in some new defines needed
  by some apps / libraries

[17.0.0-0.3.rc2]
- Update to 17.0.0-rc2

[17.0.0-0.2.rc1]
- Enable etnaviv gallium driver

[17.0.0-0.rc1]
- Update to 17.0.0-rc1

[13.0.3-3]
- Enable libglvnd support (rhbz#1413579)

[13.0.3-2]
- Add valgrind BuildRequires to have valgrind support

[13.0.3-1]
- 13.0.3 GA

[13.0.2-2]
- Use nettle for sha1

[13.0.2-1]
- 13.0.2 GA

[13.0.1-1]
- 13.0.1 GA

[13.0.0-3]
- Dont ship duplicate vulkan devel headers

[13.0.0-2]
- Add options for enabling vulkan components
- Enable intel/radeon vulkan drivers

[13.0.0-1]
- 13.0.0 GA

[13.0.0-0.3.rc2]
- rebuild for llvm 3.9

[13.0.0-0.2.rc2]
- 13.0.0-rc2

[13.0.0-0.1.rc1]
- 13.0.0-rc1

[12.0.3-2]
- Add 2 patches from upstream to fix DRI3 vaapi crashes (rhbz1309446, fdo71759)

[12.0.3-1]
- 12.0.3

[12.0.2-1]
- 12.0.2

[12.0.1-7]
- Fix PRIME fd leak

[12.0.1-6]
- Remove BuildRequires: xorg-x11-server-devel

[12.0.1-5]
- Fix broken deps with OpenCL

[12.0.1-4]
- Fix broken deps

[12.0.1-3]
- Slightly refactor spec
- Drop virtual provides for OCL

[12.0.1-2]
- Add missing %{?_isa} to requires in some devel sub-packages (bug #1138463)

[12.0.1-1]
- 12.0.1

[12.0.0-1]
- 12.0.0

[12.0.0-0.3.rc4]
- 12.0.0-rc4

[12.0.0-0.3.rc3]
- Fix packaging error on s390*

[12.0.0-0.2.rc3]
- 12.0.0-rc3

[12.0.0-0.2.rc2]
- add missing dependency for /etc/OpenCL/vendors ownership (RHBZ #1265948)

[12.0.0-0.1.rc2]
- 12.0.0-rc2

[12.0.0-0.1.rc1]
- 12.0.0-rc1

[11.3.0-0.4.gitcbcd7b6]
- cbcd7b6

[11.3.0-0.3.git171a570]
- 171a570

[11.3.0-0.2.gitea2bff1]
- add virtual Provides for ocl-icd (RHBZ #1317602)

[11.3.0-0.1.gitea2bff1]
- 11.3.0 (gitea2bff1)
- Add SWR state-tracker (but disable because build is broken)
- Use gallium-osmesa instead of classic osmesa (RHBZ #1305588)
- Remove very old changelogs

[11.2.0-0.1.rc3.20160320]
- Update to 11.2.0-rc3

[11.2.0-0.devel.11]
- rebuild against llvm 3.8.0

[11.2.0-0.devel.10]
- rebuild against new llvm packages

[11.2.0-0.devel.9]
- Fix OpenCL-enabled FTBFS by not forcing clang search path to /usr/lib

[11.2.0-0.devel.8.24ea81a.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[11.2.0-0.devel.8]
- Rebuild for llvm 3.7.1 library split

[11.2.0-0.devel.7.24ea81a]
- 24ea81a

[11.2.0-0.devel.6.5e3edd4]
- OpenCL now supported on aarch64

[11.2.0-0.devel.5.5e3edd4]
- 5e3edd4

* Thu Jan 07 2016 Adam Jackson &lt;ajax@redhat.com&gt;
- Mangle libtool even harder to get -static-libstdc++ to work

[11.2.0-0.devel.3.70d8dbc]
- 70d8dbc

[11.2.0-0.devel.2.56aff6b]
- 56aff6b

[11.2.0-0.devel.1.86fc97d]
- 86fc97d

[11.1.0-0.devel.13.5ae37ae]
- 5ae37ae

[11.1.0-0.devel.12.3994ef5]
- Link with -static-libstdc++ to work around Steam bundling its own copy

[11.1.0-0.devel.11.3994ef5]
- 3994ef5
- Enable VirGL driver

[11.1.0-0.devel.10.7182498]
- 7182498
- Disable SWR rasterizer

[11.1.0-0.devel.9.4a168ad]
- Enable experimental SWR rasterizer

[11.1.0-0.devel.8.4a168ad]
- 4a168ad

[11.1.0-0.devel.7.47d1199]
- 47d1199

[11.1.0-0.devel.6.9932142]
- 9932142

[11.1.0-0.devel.5.47e18a5]
- 47e18a5
- Rebuild against llvm 3.7

[11.1.0-0.devel.4.d6fbcf6]
- d6fbcf6

[11.1.0-0.devel.3.60aea30]
- Add brw_meta_fast_clear crash workaround patch (#1259443, fdo#86281)

[11.1.0-0.devel.2.60aea30]
- 60aea30

[11.1.0-0.devel.1.4e5752e]
- 4e5752e

[11.0.0-0.devel.2.21ccdbd]
- 21ccdbd
- add surfaceless EGL platform (RHBZ #1251747)

[11.0.0-0.devel.1.6f2d889]
- Update to 11.0.0

[10.7.0-0.devel.4.ea633db]
- Use %license
- Minor spec cleanups

[10.7.0-0.devel.3.ea633db]
- ea633db

[10.7.0-0.devel.2.8787141]
- Drop unecessary make for s390

[10.7.0-0.devel.1.8787141]
- 8787141

[10.6.0-0.devel.7.5a55f68.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[10.6.0-0.devel.7.5a55f68]
- add git to BR everywhere

[10.6.0-0.devel.6.5a55f68]
- 5a55f68

[10.6.0-0.devel.5.51e3453]
- 51e3453

[10.6.0-0.devel.4.c1485f4]
- c1485f4

[10.6.0-0.devel.3]
- F23 rebuild against llvm 3.6.0

* Fri Feb 27 2015 Rob Clark &lt;rclark@redhat.com - 10.6.0-0.devel.2.f80af89
- enable vc4 on arm

[10.6.0-0.devel.1.f80af89]
- f80af89

[10.5.0-1.20150218]
- 10.5.0

[10.5.0-0.devel.32.6171131]
- 6171131

[10.5.0-0.devel.31.c3260f8]
- c3260f8

[10.5.0-0.devel.30.290553b]
- 290553b

[10.5.0-0.devel.28.b77eaaf]
- b77eaaf

[10.5.0-0.devel.26.c633528]
- c633528

[10.5.0-0.devel.25.a6f6d61]
- a6f6d61

[10.5.0-0.devel.23.be0311c]
- be0311c

[10.5.0-0.devel.21.609c3e5]
- 609c3e5

[10.5.0-0.devel.19.3ba57ba]
- 3ba57ba

[10.5.0-0.devel.17.64dcb2b]
- 64dcb2b

[10.5.0-0.devel.15.6c18279]
- 6c18279

[10.5.0-0.devel.13.0c7f895]
- 0c7f895

[10.5.0-0.devel.11.cb5a372]
- cb5a372

[10.5.0-0.devel.10.git0d7f4c8]
- enable ilo gallium driver

[10.5.0-0.devel.9]
- Sync with_{vaapi,vdpau,nine} settings with F21

[10.5.0-0.devel.8]
- Sync ppc build config with F21

[10.5.0-0.devel.7.git0d7f4c8]
- fix requirements for d3d

[10.5.0-0.devel.6.git0d7f4c8]
- 0d7f4c8

[10.5.0-0.devel.5.git29c7cf2]
- Enable VA state-tracker
- Enable Nine state-tracker (Direct3D9 API)

[10.5.0-0.devel.4]
- Restore hardware drivers on ppc64{,le}

[10.5.0-0.devel.3.git29c7cf2]
- 29c7cf2

[10.5.0-0.devel.2.git3d9c1a9]
- 3d9c1a9

[10.5.0-0.devel.1.git9460cd3]
- 9460cd3

[10.4-0.devel.8.gitf3b709c]
- f3b709c

* Tue Oct 28 2014 10.4-0.devel.7.git1a17098
- rebuild for llvm

[10.4-0.devel.6.git1a17098]
- 1a17098

[10.4-0.devel.5.gitc3f17bb]
- c3f17bb18f597d7f606805ae94363dae7fd51582

[10.4-0.devel.4.git1f184bc]
- apply patch for bigendian from karsten
- fix ppc filelist from karsten

[10.4-0.devel.3.git1f184bc]
- 1f184bc114143acbcea373184260da777b6c6be1 commit

[10.4-0.devel.2.1.80771e47b6c1e47ab55f17311e1d4e227a9eb3d8]
- add swrast to dri driver list

[10.4-0.devel.2.80771e47b6c1e47ab55f17311e1d4e227a9eb3d8]
- 80771e47b6c1e47ab55f17311e1d4e227a9eb3d8 commit

[10.4-0.devel.1.c2867f5b3626157379ef0d4d5bcaf5180ca0ec1f]
- 10.4 c2867f5b3626157379ef0d4d5bcaf5180ca0ec1f

[10.3-0.rc1.1.e7f2f2dea5acdbd1a12ed88914e64a38a97432f0]
- e7f2f2dea5acdbd1a12ed88914e64a38a97432f0 commit

[10.3-0.devel.2.c40d7d6d948912a4d51cbf8f0854cf2ebe916636.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[10.3-0.devel.2.c40d7d6d948912a4d51cbf8f0854cf2ebe916636]
- c40d7d6d948912a4d51cbf8f0854cf2ebe916636 commit

[10.3-0.devel.1.f381c27c548aa28b003c8e188f5d627ab4105f76]
- Rebase to 'master' branch (f381c27c548aa28b003c8e188f5d627ab4105f76 commit)

[10.2.3-1.20140711]
- 10.2.3 upstream release

[10.2.2-4.20140625]
- Build aarch64 options the same as ARMv7
- Fix PPC conditionals

[10.2.2-3.20140625]
- Fix up intelInitScreen2 for DRI3 (RHBZ #1115323) (patch from drago01)

[10.2.2-2.20140625]
- add dri3 gnome-shell startup fix from Jasper.

[10.2.2-1.20140625]
- 10.2.2 upstream release

[10.2.1-2.20140608]
- drop radeonsi llvm hack

[10.2.1-1.20140608]
- 10.2.1 upstream release

[10.2-0.11.rc5.20140531]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[10.2-0.10.rc5.20140531]
- fix build without hardware drivers

[10.2-0.9.rc5.20140531]
- 10.2-rc5 upstream release

[10.2-0.8.rc4.20140524]
- Removing ppc64le arch from with_llvm

[10.2-0.7.rc4.20140524]
- i915: add a missing NULL pointer check (RHBZ #1100967)

[10.2-0.6.rc4.20140524]
- 10.2-rc4 upstream release
- add back updated radeonsi hack for LLVM

[10.2-0.5.rc3.20140517]
- 10.2-rc3 upstream release

[10.2-0.4.rc2.20140510]
- 10.2-rc2 upstream release
- drop radeonsi hack for LLVM

[10.2-0.3.rc1.20140505]
- Move gallium-pipe to the correct sub-package (RHBZ #1094588) (kwizart)
- Move egl_gallium.so to the correct location (RHBZ #1094588) (kwizart)
- Switch from with to enable for llvm shared libs (kwizart)

[10.2-0.2.rc1.20140505]
- Enable gallium-egl (needed by freedreeno) (RHBZ #1094199) (kwizart)

[10.2-0.1.rc1.20140505]
- Enable omx on x86 and arm (RHBZ #1094199) (kwizart)
- Split _with_xa from _with_vmware (RHBZ #1094199) (kwizart)
- Add _with_xa when arch is arm and _with_freedreeno (RHBZ #1094199) (kwizart)

[10.2-0.rc1.20140505]
- 10.2-rc1 upstream release

[10.1.1-3.20140430]
- Update to today snapshot
- apply as downstream patches for reporting GPU max frequency on r600 (FD.o #73511)

[10.1.1-2.20140419]
- fix buildrequires llvm 3.4-5 to 3.4-6, because 3.4-5 is not available for F20

[10.1.1-1.20140419]
- 10.1.1 upstream release

[10.1-6.20140305]
- Disable DRI3 in F20, it requires libxcb bits we havent backported.

[10.1-5.20140305]
- Initial ppc64le enablement (no hardware drivers or vdpau yet)

[10.1-4.20140305]
- mesa: Dont optimize out glClear if drawbuffer size is 0x0 (fdo #75797)

[10.1-3.20140305]
- rebuild against backported llvm 3.4-5 for radeonsi GL 3.3 support.

[10.1-2.20140305]
- disable r600 llvm compiler (upstream advice)

[10.1-1.20140305]
- mesa: Bump version to 10.1 (final) (Ian Romanick)
- glx/dri2: fix build failure on HURD (Julien Cristau)
- i965: Validate (and resolve) all the bound textures. (Chris Forbes)
- i965: Widen sampler key bitfields for 32 samplers (Chris Forbes)

[10.1-0.rc3.20140301]
- 10.1-rc3

[10.1-0.rc2.20140225]
- really 10.1-rc2

[10.1-0.rc2.20140222]
- 10.1-rc2

[10.1-0.rc1.20140208]
- 10.1rc1
- Drop upstreamed patches

[10.0.3-1.20140206]
- 10.0.3 upstream release

[10.0.2-6.20140118]
- Fix accidentally inverted logic that meant radeonsi_dri.so went missing
  on all architectures instead of just ppc and s390. Sorry!

[10.0.2-5.20140118]
- Fix a thinko in previous commit wrt libdrm_nouveau2.

[10.0.2-4.20140118]
- Fix up building drivers on AArch64, enable LLVM there.
- Eliminate some F17 cruft from the spec, since we dont support it anymore.
- Conditionalize with_radeonsi on with_llvm instead of ppc,s390 &amp;&amp; &gt;F-17.
- Conditionalize libvdpau_radeonsi.so.1* on with_radeonsi instead of simply
  with_llvm to fix a build failure on AArch64.

[10.0.2-3.20140118]
- Enable OpenCL (RHBZ #887628)
- Enable r600 llvm compiler (RHBZ #1055098)

wayland
[1.19.0-1]
- wayland 1.19.0

wayland-protocols
[1.21-1]
- Update to 1.21

xorg-x11-server
[1.20.11-2]
- Remove Xwayland from the xserver builds
  Resolves: #1956838

[1.20.11-1]
- xserver 1.20.11
  Resolves: #1954260

xorg-x11-server-Xwayland
[21.1.1-6]
- Backport the latest fixes from Xwayland for EGLstream (rhbz#1977741)

[21.1.1-5]
- Require libepoxy &gt;= 1.5.5 (rhbz#1976132)

[21.1.1-4]
- Fix a use-after-free in the previous changes for GLX

[21.1.1-3]
- Backport fixes for GLX and EGLstream (#1961981)

[21.1.1-2]
- bump release and rebuild to correctly trigger gating

[21.1.1-1]
- xwayland 21.1.1 (CVE-2021-3472 / ZDI-CAN-1259)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2021-4234.html" type="self" title="ELEA-2021-4234" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="egl-wayland" version="1.1.7" release="1.el8" epoch="0" arch="src">
          <filename>egl-wayland-1.1.7-1.el8.src.rpm</filename>
          <sum type="sha256">23b45077bc54018d42186c9dad5eccd023134d9d7298c2a614d2c85c252200ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-2986</id>
    <title>sssd bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-23 00:00:00"/>
    <updated date="2023-05-23 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>  </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-2986.html" type="self" title="ELBA-2023-2986" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="sssd" version="2.8.2" release="2.0.1.el8" epoch="0" arch="src">
          <filename>sssd-2.8.2-2.0.1.el8.src.rpm</filename>
          <sum type="sha256">c0200dd68e280735a34dd42cf4d4796a71f06258e5836ad1dad6fd68a6d18f2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4560</id>
    <title>e2fsprogs bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.45.6-5]
- Rebase to the upstream release 1.45.6 (#1843548)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4560.html" type="self" title="ELBA-2020-4560" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="e2fsprogs" version="1.45.6" release="1.el8" epoch="0" arch="src">
          <filename>e2fsprogs-1.45.6-1.el8.src.rpm</filename>
          <sum type="sha256">a2c0c3d355c24000f6590672013eb074b0356456ab5648c689886e84b33906c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-2898</id>
    <title> libtar security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-24 00:00:00"/>
    <updated date="2023-05-24 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[1.2.20-17]
- fix use-after-free bugs introduced by incorrect memleak fixes (CVE-2021-33640)

[1.2.20-16]
- fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
- fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-2898.html" type="self" title="ELSA-2023-2898" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33643.html" id="CVE-2021-33643" type="cve" title="CVE-2021-33643" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33644.html" id="CVE-2021-33644" type="cve" title="CVE-2021-33644" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33645.html" id="CVE-2021-33645" type="cve" title="CVE-2021-33645" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-33646.html" id="CVE-2021-33646" type="cve" title="CVE-2021-33646" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libtar" version="1.2.20" release="17.el8" epoch="0" arch="src">
          <filename>libtar-1.2.20-17.el8.src.rpm</filename>
          <sum type="sha256">70627119d56ef76d3e523706c635f4c70acd09b6a6c1af43f97f14f821144860</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4565</id>
    <title>libtalloc bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.3.1-2]
- resolves: rhbz#1817560 - Update to version 2.3.1</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4565.html" type="self" title="ELBA-2020-4565" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libtalloc" version="2.3.1" release="2.el8" epoch="0" arch="src">
          <filename>libtalloc-2.3.1-2.el8.src.rpm</filename>
          <sum type="sha256">2106837fa61bb6cee16d6f27c4f0641542be67920d18dc5479e040785da6b1be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-1790</id>
    <title>libpinyin bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-17 00:00:00"/>
    <updated date="2022-05-17 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.2.0-2]
- Build libpinyin for RHEL 8 CRB
- Resolves: #2006100</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-1790.html" type="self" title="ELBA-2022-1790" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libpinyin" version="2.2.0" release="2.el8" epoch="0" arch="src">
          <filename>libpinyin-2.2.0-2.el8.src.rpm</filename>
          <sum type="sha256">72e6c1455fa8c06f7bedf3d61e0e5630d7710507f534a7f26626a1dac6e72c65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4569</id>
    <title>sssd bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.3.0-9.0.1]
- Revert Redhats change of disallowing duplicated incomplete gid
  when 'id_provider=ldap' is used, which caused regression in AD
  environment. [Orabug: 29286774] [Doc ID 2605732.1]

[2.3.0-9]
- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied

[2.3.0-8]
- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
- Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
- Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
- Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesnt conform RFC5019 and has to be changed to sha1

[2.3.0-7]
- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with 'sssctl config-check' command.
- Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter

[2.3.0-6]
- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization

[2.3.0-5]
- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
- Fixed 'requires/provides' rpmdiff warning

[2.3.0-4]
- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
- Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
- Resolves: rhbz#1803134 - Improve 'unlock' time when user session already active

[2.3.0-3]
- Resolves: rhbz#1829470 - 'sssd.api.conf' and 'sssd.api.d' should belong to 'python-sssdconfig' package
- Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
- Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after 'files' provider rebuilds cache
- Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                           inotify events, and no updates are triggered
- Resolves: rhbz#1835710 - Change the message 'Please enter smart card' to 'Please insert smart card'
                           on GDM login with smart-card
- Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
- Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
- Resolves: rhbz#1845975 - sssd doesnt follow the link order of AD Group Policy Management
- Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                           if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                           in SSSD-AD direct integration.
- Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
- Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma

[2.3.0-2]
- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with 'sssctl config-check' command.

[2.3.0-1]
- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
- Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
- Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on 'yum update' which breaks working
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4569.html" type="self" title="ELBA-2020-4569" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="sssd" version="2.3.0" release="9.0.1.el8" epoch="0" arch="src">
          <filename>sssd-2.3.0-9.0.1.el8.src.rpm</filename>
          <sum type="sha256">a5d0bd7cc2926a099c56c71b7d5e1a6a7d9b35d83049aafc9c2f1daf1ef70f92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-2932</id>
    <title> edk2 security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-24 00:00:00"/>
    <updated date="2023-05-24 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[20220126gitbb1bba3d77-4]
- edk2-openssl-update.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
- edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
- Resolves: bz#2164531
  (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-8])
- Resolves: bz#2164543
  (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-8])
- Resolves: bz#2164558
  (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-8])
- Resolves: bz#2164581
  (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-8])</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-2932.html" type="self" title="ELSA-2023-2932" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4304.html" id="CVE-2022-4304" type="cve" title="CVE-2022-4304" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4450.html" id="CVE-2022-4450" type="cve" title="CVE-2022-4450" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0215.html" id="CVE-2023-0215" type="cve" title="CVE-2023-0215" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0286.html" id="CVE-2023-0286" type="cve" title="CVE-2023-0286" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20220126gitbb1bba3d77" release="4.el8" epoch="0" arch="src">
          <filename>edk2-20220126gitbb1bba3d77-4.el8.src.rpm</filename>
          <sum type="sha256">341dc468c86eaeba0e827f8abda68f3faeca5e9d9f55b18845eb1348e999e699</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2021-4405</id>
    <title>libmodulemd bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.13.0-1]
- 2.13.0 bump (bug #1984402)

[2.12.1-1]
- 2.12.1 bump (bug #1894573)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2021-4405.html" type="self" title="ELEA-2021-4405" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libmodulemd" version="2.13.0" release="1.el8" epoch="0" arch="src">
          <filename>libmodulemd-2.13.0-1.el8.src.rpm</filename>
          <sum type="sha256">6faf3501efb495e4fce74b0e010c2d787fc5b3fcd013c7f046b2cde5aa1f1c68</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-3148</id>
    <title>sssd bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-23 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[2.9.4-2.0.1]
- Restore default debug level for sss_cache [Orabug: 32810448]

[2.9.4-2]
- Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
- Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
- Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]

[2.9.4-1]
- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
- Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
- Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
- Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
- Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
- Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
- Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
- Resolves: RHEL-10721 - very bad performance when requesting service tickets
- Resolves: RHEL-19011 - Invalid handling groups from child domain
- Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]

[2.9.3-2]
- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10

[2.9.3-1]
- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
- Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
- Resolves: RHEL-3665 - Unexplainable error 'Unable to find primary gid [2]: No such file or directory' when SSSD performs lookup for an AD user

[2.9.2-1]
- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
- Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
- Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)

[2.9.1-2]
- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system

[2.9.1-1]
- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
- Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
- Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
- Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
- Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
- Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
- Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
- Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
- Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
- Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'

[2.9.0-4]
- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
  Rebuild against rebased Samba libs

[2.9.0-3]
- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9

[2.9.0-1]
- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
- Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
- Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
- Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
- Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
- Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or 'make filtering of the domains more configurable')
- Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #

[2.8.2-2]
- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in 'Request to sssd failed. Device or resource busy'

[2.8.2-1]
- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
- Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
- Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
- Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
- Resolves: rhbz#2142795 - SSSD: sssctl analyze command shouldn't require 'root' privileged
- Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
- Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)

[2.8.1-1]
- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
- Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
- Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
- Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user's password when option ldap_pwd_policy equals to shadow in sssd.conf file
- Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (krb5_validate and pac_check settings conflict)
- Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed

[2.7.3-5]
- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
  Rebuild against Samba rebase.

[2.7.3-4]
- Resolves: rhbz#2116395 - NFS krb5 mount failed as 'access denied' after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8

[2.7.3-3]
- Resolves: rhbz#2116395 - NFS krb5 mount failed as 'access denied' after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend

[2.7.3-2]
- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL

[2.7.3-1]
- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization

[2.7.2-1]
- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression 'Missing internal domain data.' when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol

[2.7.0-2]
- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language

[2.6.2-3]
- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol 'krb5_unmarshal_credentials' only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization

[2.6.2-2]
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)

[2.6.2-1]
- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol 'krb5_unmarshal_credentials' only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing 'includedir /var/lib/sss/pubconf/krb5.include.d' directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization

[2.6.1-2]
- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release

[2.6.1-1]
- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
- Resolves: rhbz#1952569 - SSSD should use 'hidden' temporary file in its krb locator
- Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
- Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
- Resolves: rhbz#2021196 - Make backtrace less 'chatty' (avoid duplicate backtraces)
- Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
- Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
- Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
- Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
- Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing

[2.5.2-2]
- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization

[2.5.2-1]
- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for originalADgidNumber
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade

[2.5.1-2]
- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)

[2.5.1-1]
- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf

[2.5.0-1]
- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels('first factor' / 'second factor') on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify 'single_prompt' option in 'PROMPTING CONFIGURATION SECTION' section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive

[2.4.0-8]
- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
- Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)

[2.4.0-7]
- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
- Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
- Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11

[2.4.0-6]
- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
- Resolves: rhbz#1915395 - Memory leak in the simple access provider
- Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)

[2.4.0-5]
- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
- Resolves: rhbz#1893159 - Default debug level should report all errors / failures
- Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication

[2.4.0-4]
- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
- Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
- Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently

[2.4.0-3]
- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
- Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
- Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior

[2.4.0-2]
- This is to bump version to allow rebuild against rebased libldb.

[2.4.0-1]
- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
- Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
- Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
- Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
- Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
- Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
- Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
- Resolves: rhbz#1846778 - [RfE] /usr/libexec/sssd/p11_child cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
- Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
- Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
- Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter 'ldap_referrals'
- Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
- Resolves: rhbz#1884196 - [RFE] Add 'enabled' option to domain section in config file
- Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
- Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
- Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
- Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
- Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate

[2.3.0-9]
- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied

[2.3.0-8]
- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
- Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
- Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
- Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1

[2.3.0-7]
- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with 'sssctl config-check' command.
- Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter

[2.3.0-6]
- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization

[2.3.0-5]
- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
- Fixed 'requires/provides' rpmdiff warning

[2.3.0-4]
- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
- Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
- Resolves: rhbz#1803134 - Improve 'unlock' time when user session already active

[2.3.0-3]
- Resolves: rhbz#1829470 - sssd.api.conf and sssd.api.d should belong to python-sssdconfig package
- Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
- Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after 'files' provider rebuilds cache
- Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                           inotify events, and no updates are triggered
- Resolves: rhbz#1835710 - Change the message 'Please enter smart card' to 'Please insert smart card'
                           on GDM login with smart-card
- Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
- Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
- Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                           if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                           in SSSD-AD direct integration.
- Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
- Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma

[2.3.0-2]
- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with 'sssctl config-check' command.

[2.3.0-1]
- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
- Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
- Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on 'yum update' which breaks working

[2.2.3-19]
- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                           certificate EKU and perform an action based
                           on value when generating SSH key from a certificate
                           (additional patch)

[2.2.3-19]
- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                           information

[2.2.3-18]
- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                           certificate EKU and perform an action based
                           on value when generating SSH key from a certificate

[2.2.3-17]
- Resolves: rhbz#1718193 - p11_child should have an option to skip
                           C_WaitForSlotEvent if the PKCS#11 module
                           does not implement it properly

[2.2.3-16]
- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                           omitted and auth_provider is krb5

[2.2.3-15]
- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization

[2.2.3-14]
- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                           specified up to the seconds

[2.2.3-13]
- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools

[2.2.3-12]
* Resolves: rhbz#1794016 - sssd_be frequent crash

[2.2.3-11]
* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider

[2.2.3-10]
* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap
                           connection timeout

[2.2.3-9]
* Resolves: rhbz#1783190 - [abrt] [faf] sssd:
                           raise(): /usr/libexec/sssd/sssd_autofs killed by 6

[2.2.3-8]
* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect

[2.2.3-7]
* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect

[2.2.3-6]
* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized

[2.2.3-5]
* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character
                           for match rules sss-certmap

[2.2.3-4]
* Resolves: rhbz#1781728 - sssctl config-check command does not give proper
                           error messages with line numbers

[2.2.3-3]
* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
            Increasing version number to pick latest libldb

[2.2.3-2]
* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
            PART2: Fix gating issue.

[2.2.3-1]
* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release

[2.2.2-1]
* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release

[2.2.0-19]
- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                           new ones (kcm)

[2.2.0-18]
- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
- Also sync. kcm multihost tests with master

[2.2.0-17]
- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                           keyring
- Also apply a patch to fix gating tests issue

[2.2.0-16]
- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                           the IP address of the machine updated in IPA upon
                           sssd.service startup

[2.2.0-15]
- Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                           loop if wrong PIN was provided

[2.2.0-14]
- Resolves: rhbz#1736796 - sssd config option 'default_domain_suffix'
                           should not cause files domain entries to be
                           qualified, this can break sudo access

[2.2.0-13]
- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
            systemd-user service in the account phase in RHEL-8

[2.2.0-12]
- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets

[2.2.0-11]
- Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                           non-root user

[2.2.0-10]
- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                           the trailing colon

[2.2.0-9]
- Resolves: rhbz#1382750 - Conflicting default timeout values

[2.2.0-8]
- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder
                           repository
                         - This just required a raise in release number
                           and changelog for the record.

[2.2.0-7]
- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is
                           not FIPS140 compliant

[2.2.0-6]
- Resolves: rhbz#1726945 - negative cache does not use values from
                           'filter_users' config option for known domains

[2.2.0-5]
- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo

[2.2.0-4]
- Resolves: rhbz#1283798 - sssd failover does not work on connecting to
                           non-responsive ldaps:// server

[2.2.0-3]
- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with
                           no members

[2.2.0-2]
- Resolves: rhbz#1673443 - sssd man pages: The default value of
                           'ldap_user_home_directory' is not mentioned
                           with AD server configuration

[2.2.0-1]
- Resolves: rhbz#1687281
  Rebase sssd in RHEL-8.1 to the latest upstream release

[2.1.0-1]
- Resolves: rhbz#1687281
  Rebase sssd in RHEL-8.1 to the latest upstream release

[2.0.0-45]
- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is
  done here in order to unblock gating changes before rebase.
- Related: rhbz#1682305

[2.0.0-43]
- Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                           card maps to multiple users

[2.0.0-42]
- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                           of gen_new to avoid a subsequent switch call
                           failure

[2.0.0-41]
-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                          subdomain service name being used

[2.0.0-40]
-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                          UnknownProperty: Unknown property

[2.0.0-39]
- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                           1.x, this can result in time outs

[2.0.0-38]
- Resolves: rhbz#1578014 - sssd does not work under non-root user
- Note: Actually the patches were in the 2.0.0-37, this one just adds this
        changelog because it was missing.

[2.0.0-36]
- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                           suggests using * for backend sss

[2.0.0-35]
- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist

[2.0.0-34]
- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                           kdestroy caused by KCM returning a wrong error
                           code during the delete operation

[2.0.0-33]
- Resolves: rhbz#1646113 - Missing concise documentation about valid options
                           for sssd-files-provider

[2.0.0-32]
- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc
            and libtevent to avoid an issue in GPO processing

[2.0.0-31]
- Resolves: 1658813 - PKINIT with KCM does not work

[2.0.0-30]
- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to
                      retrieve AD users through IPA Trust

[2.0.0-29]
- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise():
                           /usr/libexec/sssd/proxy_child killed by 6

[2.0.0-28]
- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories

[2.0.0-27]
- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI

[2.0.0-26]
- Resolves: rhbz#1657980 - sssd_nss memory leak

[2.0.0-25]
- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly
                           for D-bus, resulting in a crash

[2.0.0-24]
- Resolves: rhbz#1646168 - sssctl access-report always prints an error message
- Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the
                           configuration without having to restart the whole
                           sssd
- Resolves: rhbz#1640576 - sssctl reports incorrect information about local
                           user's cache entry expiration time
- Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user
- Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys

[2.0.0-23]
- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui
                           with smart card

[2.0.0-22]
- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA

[2.0.0-21]
- Related: rhbz#1638150 - session not recording for local user when groups defined
- Also add silence a Coverity warning, which is related to rhbz#1637131

[2.0.0-20]
- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules

[2.0.0-19]
- Add OSCP checks for p11_child
- Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                          users

[2.0.0-18]
- Related: rhbz#1638006 - Files: The files provider always enumerates
                          which causes duplicate when running getent passwd

[2.0.0-17]
- Related: rhbz#1637131 - pam_unix unable to match fully qualified username
                          provided by sssd during smartcard auth using gdm

[2.0.0-16]
- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a
                          PKCS#11 URI

[2.0.0-15]
- Related: rhbz#1611011 - Support for 'require smartcard for login option'

[2.0.0-14]
- Related: rhbz#1635595 - Cant login with smartcard with multiple certs

[2.0.0-13]
- Backport more sbus2 fixes
- Related: rhbz#1623878 - crash related to sbus_router_destructor()

[2.0.0-12]
- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD

[2.0.0-11]
- Resolves: rhbz#1628122 - Printing incorrect information about domain
                           with sssctl utility

[2.0.0-10]
- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not
                           started due to a misconfiguration

[2.0.0-9]
- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del
                           commands in man pages since local provider
                           is deprecated

[2.0.0-8]
- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function():
                            /usr/libexec/sssd/sssd_be killed by 11 crash
                            func _dbus_list_unlink

[2.0.0-7]
- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it
                           differs from the default

[2.0.0-6]
- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup

[2.0.0-5]
- Resolves: rhbz#1615590 - Do not rely on 'python' for el8

[2.0.0-4]
- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                           users

[2.0.0-3]
- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()

[2.0.0-2]
- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication
                           fails with the KCM ccache

[2.0.0-1]
- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version

[1.16.2-2]
- Switch hardcoded python3 shebangs into the %{__python3} macro

[1.16.2-1]
- Update to 1.16.2 release
- Cleanup unused global definitions
- Remove python2 references from the spec file
- Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x

[1.16.1-3]
- Resolves: upstream#3684 - A group is not updated if its member is removed
                            with the cleanup task, but the group does not
                            change
- Resolves: upstream#3558 - sudo: report error when two rules share cn
- Tone down shutdown messages for socket activated responders
- IPA: Qualify the externalUser sudo attribute
- Resolves: upstream#3550 - refresh_expired_interval does not work with
                            netgrous in 1.15
- Resolves: upstream#3402 - Support alternative sources for the files provider
- Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
- Resolves: upstream#3679 - Make nss netgroup requests more robust
- Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                            configured
- Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                            processing
- Improve docs/debug message about GC detection
- Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                            list out of bound?
- Resolves: upstream#2653 - Group renaming issue when 'id_provider = ldap' is
                            set.
- Document which principal does the AD provider use
- Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                            defined, but contains no SIDs
- Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
- Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                           Provider returned an error
                           [org.freedesktop.sssd.Error.DataProvider.Fatal]

[1.16.1-2]
- Resolves: upstream#3573 - sssd won't show netgroups with blank domain
- Resolves: upstream#3660 - confdb_expand_app_domains() always fails
- Resolves: upstream#3658 - Application domain is not interpreted correctly
- Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                            json_loads()
- Resolves: upstream#3386 - KCM: Payload buffer is too small
- Resolves: upstream#3666 - Fix usage of str.decode() in our tests
- A few KCM misc fixes

[1.16.1-1]
- New upstream release 1.16.1
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html

[1.16.0-13]
- Resolves: upstream#3621 - backport bug found by static analyzers

[1.16.0-12]
- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Resolves: upstream#3621 - FleetCommander integration must not require
                            capability DAC_OVERRIDE

[1.16.0-11]
- Resolves: upstream#3618 - selinux_child segfaults in a docker container

[1.16.0-10]
- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl

[1.16.0-9]
- Fix systemd executions/requirements

[1.16.0-8]
- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS

[1.16.0-7]
- Fix building of sssd-nfs-idmap with libnfsidmap.so.1

[1.16.0-6]
- Rebuilt for libnfsidmap.so.1

[1.16.0-5]
- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                            setnetgrent_result_timeout
- Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                            or machine swaps
- Resolves: failure in glibc tests
            https://sourceware.org/bugzilla/show_bug.cgi?id=22530
- Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                            auth_provider ldap, login fails if the LDAP server
                            is not allowing anonymous binds
- Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                            corrected with AD
- Resolves: upstream#3586 - Give a more detailed debug and system-log message
                            if krb5_init_context() failed
- Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                           in /etc/systemd/system
- Backport few upstream features from 1.16.1

[1.16.0-4]
- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next

[1.16.0-3]
- Backport extended NSS API from upstream master branch

[1.16.0-2]
- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade

[1.16.0-1]
- New upstream release 1.16.0
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html

[1.15.3-5]
- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database access on
                           the sock_file system_bus_socket

[1.15.3-4]
- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
                           access on the sock_file system_bus_socket
- Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                           fails to download desktop profile data
- Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
- Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
                            after applying ID Views for them in IPA server
- Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
                            mapping is applied

[1.15.3-3]
- Backport few upstream patches/fixes

[1.15.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.15.3-1]
- New upstream release 1.15.3
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html

[1.15.3-0.beta.5]
- Rebuild with libldb-1.2.0

[1.15.3-0.beta.4]
- Fix build issues: Update expided certificate in unit tests

[1.15.3-0.beta.3]
- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
- Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                           file from package sssd-common-1.15.1-1.fc25.x86_64
- Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4

[1.15.3-0.beta.2]
- Fix issue with IPA + SELinux in containers
- Resolves: upstream https://fedorahosted.org/sssd/ticket/3297

[1.15.3-0.beta.1]
- Backport upstream patches for 1.15.3 pre-release
- required for building freeipa-4.5.x in rawhide

[1.15.2-1]
- New upstream release 1.15.2
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html

[1.15.1-1]
- New upstream release 1.15.1
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html

[1.15.0-4]
- Cherry-pick patches from upstream that enable the files provider
- Enable the files domain
- Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch
  which is superseded by the files domain autoconfiguration
- Related: rhbz#1357418 - SSSD fast cache for local users

[1.15.0-3]
- Add missing %license macro

[1.15.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.15.0-1]
- New upstream release 1.15.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0

[1.14.2-3]
- Rebuild for Python 3.6

[1.14.2-2]
- Resolves: rhbz#1369130 - nss_sss should not link against libpthread
- Resolves: rhbz#1392916 - sssd failes to start after update
- Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                           on the directory /etc/sssd

[1.14.2-1]
- New upstream release 1.14.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2

[1.14.1-4]
- libwbclient-sssd: update interface to version 0.13

[1.14.1-3]
- Fix regression with krb5_map_user
- Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
- Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                           default if nonexistent domain is mentioned

[1.14.1-2]
- Backport important patches from upstream 1.14.2 prerelease
- Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                             boot
- Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14

[1.14.1-1]
- New upstream release 1.14.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1

[1.14.0-5]
- Add workaround patch for RHBZ #1366403

[1.14.0-4]
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages

[1.14.0-3]
- New upstream release 1.14.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0

[1.14.0-2.beta]
- New upstream release 1.14 beta
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta

[1.14.0-1.alpha]
- New upstream release 1.14 alpha
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha

[1.13.4-3]
- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
                           sssd_ifp killed by SIGSEGV

[1.13.4-2]
- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6

[1.13.4-1]
- New upstream release 1.13.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4

[1.13.3-6]
- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
                           prompts (e.g. Password + Token)
- Resolves: rhbz#1313041 - ssh with sssd proxy fails with 'Connection closed
                           by remote host' if locale not available

[1.13.3-5]
- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
                           groups during getgrnam and getgrgid
- Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                           in call to 'print'

[1.13.3-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.13.3-3]
- Additional upstream fixes

[1.13.3-2]
- Resolves: rhbz#1256849 - SUDO: Support the IPA schema

[1.13.3-1]
- New upstream release 1.13.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3

[1.13.2-1]
- New upstream release 1.13.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2

[1.13.1-5]
- Rebuilt for Python3.5 rebuild

[1.13.1-4]
- Fix building pac responder with the krb5-1.14

[1.13.1-3]
- python-sssdconfig: Fix parssing sssd.conf without config_file_version
- Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed

[1.13.1-2]
- Fix few segfaults
- Resolves: upstream #2811 - PAM responder crashed if user was not set
- Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step

[1.13.1-1]
- New upstream release 1.13.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1

[1.13.0-6]
- Fix OTP bug
- Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                             entered separately

[1.13.0-5]
- Backport upstream patches required by FreeIPA 4.2.1

[1.13.0-4]
- Fix ipa-migration bug
- Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                             migration mode

[1.13.0-3]
- New upstream release 1.13.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0

[1.13.0-2.alpha]
- Unify return type of list_active_domains for python{2,3}

[1.13.0-1.alpha]
- New upstream release 1.13 alpha
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha

[1.12.5-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.12.5-3]
- Fix libwbclient alternatives

[1.12.5-2]
- Backport important patches from upstream 1.13 prerelease

[1.12.5-1]
- New upstream release 1.12.5
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5

[1.12.4-8]
- Backport important patches from upstream 1.13 prerelease
- Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                           attribute for group name
- Resolves: upstream #2335 - Investigate using the krb5 responder
                             for driving the PAM conversation with OTPs
- Enable cmocka tests for secondary architectures

[1.12.4-7]
- Backport patches from upstream 1.12.5 prerelease - contains many fixes

[1.12.4-6]
- Fix slow login with ipa and SELinux
- Resolves: upstream #2624 - Only set the selinux context if the context
                             differs from the local one

[1.12.4-5]
- Fix regressions with ipa and SELinux
- Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u

[1.12.4-4]
- Also relax libldb Requires
- Remove --enable-ldb-version-check

[1.12.4-3]
- Relax libldb BuildRequires to be greater-or-equal

[1.12.4-2]
- Add support for python3 bindings
- Add requirement to python3 or python3 bindings
- Resolves: rhbz#1014594 - sssd: Support Python 3

[1.12.4-1]
- New upstream release 1.12.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4

[1.12.3-7]
- Backport patches with Python3 support from upstream

[1.12.3-6]
- Fix double free in monitor
- Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                        sssd killed by SIGABRT

[1.12.3-5]
- Rebuild for new libldb

[1.12.3-4]
- Decrease priority of sssd-libwbclient 20 -&gt; 5
- It should be lower than priority of samba veriosn of libwbclient.
- https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18

[1.12.3-3]
- Apply a number of patches from upstream to fix issues found 1.12.3
- Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                           interfaces, or isn't documented to be able to
- Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                          not running
- Resolves: upstream #2557  authentication failure with user from AD

[1.12.3-2]
- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
- Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                           zipping when rotating logfile

[1.12.3-1]
- New upstream release 1.12.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
- Fix spelling errors in description (fedpkg lint)

[1.12.2-8]
- Rebuild for libldb 1.1.19

[1.12.2-7]
- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                           crash in wbinfo
                           - in addition to the patch libwbclient.so is
                             filtered out of the Provides list of the package

[1.12.2-6]
- Fix regressions and bugs in sssd upstream 1.12.2
- https://fedorahosted.org/sssd/ticket/{id}
- Regressions: #2471, #2475, #2483, #2487, #2529, #2535
- Bugs: #2287, #2445

[1.12.2-5]
- Rebuild for libldb 1.1.18

[1.12.2-4]
- Fix typo in libwbclient-devel %preun

[1.12.2-3]
- Use alternatives for libwbclient

[1.12.2-2]
- Backport several patches from upstream.
- Fix a potential crash against old (pre-4.0) IPA servers

[1.12.2-1]
- New upstream release 1.12.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2

[1.12.1-2]
- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                           private group from server

[1.12.1-1]
- New upstream release 1.12.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1

[1.12.0-7]
- Do not crash on resolving a group SID in IPA server mode

[1.12.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.12.0-5]
- Fix release version for upgrades

[1.12.0-1]
- New upstream release 1.12.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0

[1.12.0-4.beta2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.12.0-1.beta2]
- New upstream release 1.12 beta2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2

[1.12.0-2.beta1]
- Fix tests on big-endian
- Fix previous changelog entry

[1.12.0-1.beta1]
- New upstream release 1.12 beta1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1

[1.11.5.1-4]
- Rebuild against new ding-libs

[1.11.5.1-3]
- Make LDB dependency a strict equivalency

[1.11.5.1-2]
- Rebuild against new libldb

[1.11.5.1-1]
- New upstream release 1.11.5.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1

[1.11.5-2]
- Fix bug in generation of systemd unit file

[1.11.5-1]
- New upstream release 1.11.5
- Remove upstreamed patch
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5

[1.11.4-3]
- Handle new error code for IPA password migration

[1.11.4-2]
- Include couple of patches from upstream 1.11 branch

[1.11.4-1]
- New upstream release 1.11.4
- Remove upstreamed patch
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4

[1.11.3-2]
- Handle OTP response from FreeIPA server gracefully

[1.11.3-1]
- New upstream release 1.11.3
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3

[1.11.2-1]
- New upstream release 1.11.2
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2

[1.11.1-5]
- Fix potential crash with external groups in trusted IPA-AD setup

[1.11.1-4]
- Add plugin for cifs-utils
- Resolves: rhbz#998544

[1.11.1-3]
- Fix failover from Global Catalog to LDAP in case GC is not available

[1.11.1-2]
- Remove the ability to create public ccachedir (#1015089)

[1.11.1-1]
- New upstream release 1.11.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1

[1.11.0-3]
- Fix multicast checks in the SSSD
- Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                           code getting the host info

[1.11.0-2]
- Backport simplification of ccache management from 1.11.1
- Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login

[1.11.0-1]
- New upstream release 1.11.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0

[1.11.0-0.4.beta2]
- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
                      Process /usr/libexec/sssd/sssd_nss was killed by
                      signal 11 (SIGSEGV)
- Resolves: #996214 - sssd proxy_child segfault

[1.11.0-0.3.beta2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.11.0.2beta2]
- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                      pam libraries

[1.11.0.1beta2]
- New upstream release 1.11 beta 2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2

[1.10.1-1]
- New upstream release 1.10.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1

[1.10.0-17]
- sssd-tools should require sssd-common, not sssd

[1.10.0-16]
- Move sssd_pac to the sssd-ipa and sssd-ad subpackages
- Trim out RHEL5-specific macros since we don't build on RHEL 5
- Trim out macros for Fedora older than F18
- Update libldb requirement to 1.1.16
- Trim RPM changelog down to the last year

[1.10.0-15]
- Move sssd_pac to the sssd-krb5 subpackage

[1.10.0-14]
- Fix Obsoletes: to account for dist tag
- Convert post and pre scripts to run on the sssd-common subpackage
- Remove old conversion from SYSV

[1.10.0-13]
- New upstream release 1.10
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0

[1.10.0-12.beta2]
- the cmocka toolkit exists only on selected arches

[1.10.0-11.beta2]
- Apply a number of patches from upstream to fix issues found post-beta,
  in particular:
  -- segfault with a high DEBUG level
  -- Fix IPA password migration (upstream #1873)
  -- Fix fail over when retrying SRV resolution (upstream #1886)

[1.10.0-10.beta2]
- Only BuildRequire libcmocka on Fedora

[1.10.0-9.beta2]
- Fix typo in Requires that prevented an upgrade (#973916)
- Use a hardcoded version in Conflicts, not less-than-current

[1.10.0-8.beta1]
- Enable hardened build for RHEL7

[1.10.0-8.beta2]
- New upstream release 1.10 beta2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
- BuildRequire libcmocka-devel in order to run all upstream tests during build
- BuildRequire libnl3 instead of libnl1
- No longer BuildRequire initscripts, we no longer use /sbin/service
- Remove explicit krb5-libs &gt;= 1.10 requires; this platform doensn't carry any
  older krb5-libs version

[1.10.0-7.beta1]
- Apply a couple of patches from upstream git that resolve crashes when
  ID mapping object was not initialized properly but needed later

[1.10.0-6.beta1]
- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                          realm join
- Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                          default for AD Provider
- Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                          parent directory when logging in

[1.10.0-5.beta1]
- BuildRequire recent libini_config to ensure consistent behaviour

[1.10.0-4.beta1]
- Explicitly Require libini_config &gt;= 1.0.0.1 to work around a SONAME bug
  in ding-libs
- Fix SSH integration with fully-qualified domains
- Add the ability to dynamically discover the NetBIOS name

[1.10.0-3.beta1]
- New upstream release 1.10 beta1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1

[1.10.0-2.alpha1]
- Add a patch to fix krb5 ccache creation issue with krb5 1.11

[1.10.0-1.alpha1]
- New upstream release 1.10 alpha1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1

[1.9.5-10]
- Add a patch to fix krb5 unit tests

[1.9.4-9]
- Split internal helper libraries into a shared object
- Significantly reduce disk-space usage

[1.9.4-8]
- Fix the Kerberos password expiration warning (#912223)

[1.9.4-7]
- Do not write out dots in the domain-realm mapping file (#905650)

[1.9.4-6]
- Include upstream patch to build with krb5-1.11

[1.9.4-5]
- Rebuild against new libldb

[1.9.4-4]
- Fix build with new automake versions

[1.9.4-3]
- Recreate Kerberos ccache directory if it's missing
- Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                          directory /run/user/UID/ccdir does not exist

[1.9.4-2]
- Fix changelog dates to make F19 rpmbuild happy

[1.9.4-1]
- New upstream release 1.9.4

[1.9.3-1]
- New upstream release 1.9.3

[1.9.2-5]
- Resolve groups from AD correctly

[1.9.2-4]
- Check the validity of naming context

[1.9.2-3]
- Move the sss_cache tool to the main package

[1.9.2-2]
- Include the 1.9.2 tarball

[1.9.2-1]
- New upstream release 1.9.2

[1.9.1-1]
- New upstream release 1.9.1

[1.9.0-24]
- require the latest libldb

[1.9.0-24]
- Use mcpath insted of mcachepath macro to be consistent with
  upsteam spec file

[1.9.0-23]
- New upstream release 1.9.0

[1.9.0-22.rc1]
- New upstream release 1.9.0 rc1

[1.9.0-21.beta7]
- New upstream release 1.9.0 beta7
- obsoletes patches #1-#3

[1.9.0-20.beta6]
- Rebuild against libldb 1.12

[1.9.0-19.beta6]
- Rebuild against libldb 1.11

[1.9.0-18.beta6]
- Change the default ccache location to DIR:/run/user/1000/krb5cc
  and patch man page accordingly
- Resolves: rhbz#851304

[1.9.0-17.beta6]
- Rebuild against libldb 1.10

[1.9.0-16.beta6]
- Only create the SELinux login file if there are SELinux mappings on
  the IPA server

[1.9.0-14.beta6]
- Don't discard HBAC rule processing result if SELinux is on
  Resolves: rhbz#846792 (CVE-2012-3462)

[1.9.0-13.beta6]
- New upstream release 1.9.0 beta 6
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
- A new option, override_shell was added. If this option is set, all users
  managed by SSSD will have their shell set to its value.
- Fixes for the support for setting default SELinux user context from FreeIPA.
- Fixed a regression introduced in beta 5 that broke LDAP SASL binds
- The SSSD supports the concept of a Primary Server and a Back Up Server in
  failover
- A new command-line tool sss_seed is available to help prime the cache with
  a user record when deploying a new machine
- SSSD is now able to discover and save the domain-realm mappings
  between an IPA server and a trusted Active Directory server.
- Packaging changes to fix ldconfig usage in subpackages (#843995)
- Rebuild against libldb 1.1.9

[1.9.0-13.beta5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[1.9.0-12.beta5]
- New upstream release 1.9.0 beta 5
- Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
- Many fixes for the support for setting default SELinux user context from
  FreeIPA, most notably fixed the specificity evaluation
- Fixed an incorrect default in the krb5_canonicalize option of the AD
  provider which was preventing password change operation
- The shadowLastChange attribute value is now correctly updated with the
  number of days since the Epoch, not seconds

[1.9.0-11.beta4]
- Fix broken ARM build
- Add missing DP_OPTION_TERMINATOR in AD provider options

[1.9.0-10.beta4]
- Own several directories create during make install (#839782)

[1.9.0-9.beta4]
- New upstream release 1.9.0 beta 4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
- Add a new AD provider to improve integration with Active Directory 2008 R2
  or later servers
- SUDO integration was completely rewritten. The new implementation works
  with multiple domains and uses an improved refresh mechanism to download
  only the necessary rules
- The IPA authentication provider now supports subdomains
- Fixed regression for setups that were setting default_tkt_enctypes
  manually by reverting a previous workaround.

[1.9.0-8.beta3]
- New upstream release 1.9.0 beta 3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
- Add a new PAC responder for dealing with cross-realm Kerberos trusts
- Terminate idle connections to the NSS and PAM responders

[1.9.0-7.beta2]
- Switch unicode library from libunistring to Glib
- Drop unnecessary explicit Requires on keyutils
- Guarantee that versioned Requires include the correct architecture

[1.9.0-6.beta2]
- Fix accidental disabling of the DIR cache support

[1.9.0-5.beta2]
- New upstream release 1.9.0 beta 2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
- Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
- Major performance enhancement when storing large groups in the cache
- Major performance enhancement when performing initgroups() against Active
  Directory
- SSSDConfig data file default locations can now be set during configure for
  easier packaging

[1.9.0-4.beta1]
- Fix regression in endianness patch

[1.9.0-3.beta1]
- Rebuild SSSD against ding-libs 0.3.0beta1
- Fix endianness bug in service map protocol

[1.9.0-2.beta1]
- Fix several regressions since 1.5.x
- Ensure that the RPM creates the /var/lib/sss/mc directory
- Add support for Netscape password warning expiration control
- Rebuild against libldb 1.1.6

[1.9.0-1.beta1]
- New upstream release 1.9.0 beta 1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
- Add native support for autofs to the IPA provider
- Support for ID-mapping when connecting to Active Directory
- Support for handling very large (&gt; 1500 users) groups in Active Directory
- Support for sub-domains (will be used for dealing with trust relationships)
- Add a new fast in-memory cache to speed up lookups of cached data on
  repeated requests

[1.8.3-11]
- New upstream release 1.8.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
- Numerous manpage and translation updates
- LDAP: Handle situations where the RootDSE isn't available anonymously
- LDAP: Fix regression for users using non-standard LDAP attributes for user
  information

[1.8.2-10]
- New upstream release 1.8.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
- Several fixes to case-insensitive domain functions
- Fix for GSSAPI binds when the keytab contains unrelated principals
- Fixed several segfaults
- Workarounds added for LDAP servers with unreadable RootDSE
- SSH knownhostproxy will no longer enter an infinite loop preventing login
- The provided SYSV init script now starts SSSD earlier at startup and stops
  it later during shutdown
- Assorted minor fixes for issues discovered by static analysis tools

[1.8.1-9]
- Don't duplicate libsss_autofs.so in two packages
- Set explicit package contents instead of globbing

[1.8.1-8]
- Fix uninitialized value bug causing crashes throughout the code
- Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup

[1.8.1-7]
- New upstream release 1.8.1
- Resolve issue where we could enter an infinite loop trying to connect to an
  auth server
- Fix serious issue with complex (3+ levels) nested groups
- Fix netgroup support for case-insensitivity and aliases
- Fix serious issue with lookup bundling resulting in requests never
  completing
- IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
  in addition to pam_authenticate
- Fix several regressions in the proxy provider
- Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                          against AD
- Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work

[1.8.0-6]
- New upstream release 1.8.0
- Support for the service map in NSS
- Support for setting default SELinux user context from FreeIPA
- Support for retrieving SSH user and host keys from LDAP (Experimental)
- Support for caching autofs LDAP requests (Experimental)
- Support for caching SUDO rules (Experimental)
- Include the IPA AutoFS provider
- Fixed several memory-corruption bugs
- Fixed a regression in group enumeration since 1.7.0
- Fixed a regression in the proxy provider
- Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
- Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                          logged at each login
- Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                          /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
- Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                          against AD
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                          new LDAP features
- Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc

[1.8.0-5.beta3]
- Change default kerberos credential cache location to /run/user/&lt;username&gt;

[1.8.0-4.beta3]
- New upstream release 1.8.0 beta 3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
- Fixed a regression in group enumeration since 1.7.0
- Fixed several memory-corruption bugs
- Finalized the ABI for the autofs support
- Fixed a regression in the proxy provider

[1.8.0-3.beta2]
- Rebuild against PCRE 8.30

[1.8.0-1.beta2]
- New upstream release
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
- Fix two minor manpage bugs
- Include the IPA AutoFS provider

[1.8.0-1.beta1]
- New upstream release
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
- Support for the service map in NSS
- Support for setting default SELinux user context from FreeIPA
- Support for retrieving SSH user and host keys from LDAP (Experimental)
- Support for caching autofs LDAP requests (Experimental)
- Support for caching SUDO rules (Experimental)

[1.7.0-5]
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                          new LDAP features - fix netgroups and sudo as well

[1.7.0-4]
- Fixes a serious memory hierarchy bug causing unpredictable behavior in the
  LDAP provider.

[1.7.0-3]
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                          new LDAP features

[1.7.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[1.7.0-1]
- New upstream release 1.7.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
- Support for case-insensitive domains
- Support for multiple search bases in the LDAP provider
- Support for the native FreeIPA netgroup implementation
- Reliability improvements to the process monitor
- New DEBUG facility with more consistent log levels
- New tool to change debug log levels without restarting SSSD
- SSSD will now disconnect from LDAP server when idle
- FreeIPA HBAC rules can choose to ignore srchost options for significant
  performance gains
- Assorted performance improvements in the LDAP provider

[1.6.4-1]
- New upstream release 1.6.4
- Rolls up previous patches applied to the 1.6.3 tarball
- Fixes a rare issue causing crashes in the failover logic
- Fixes an issue where SSSD would return the wrong PAM error code for users
  that it does not recognize.

[1.6.3-5]
- Rebuild against libldb 1.1.4

[1.6.3-4]
- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                          username in getpwnam()
- Resolves: rhbz#758425 - LDAP failover not working if server refuses
                          connections

[1.6.3-3]
- Rebuild for libldb 1.1.3

[1.6.3-2]
- Resolves: rhbz#752495 - Crash when apply settings

[1.6.3-1]
- New upstream release 1.6.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
- Fixes a major cache performance issue introduced in 1.6.2
- Fixes a potential infinite-loop with certain LDAP layouts

[1.6.2-5]
- Rebuilt for glibc bug#747377

[1.6.2-4]
- Change selinux policy requirement to Conflicts: with the old version,
  rather than Requires: the supported version.

[1.6.2-3]
- Add explicit requirement on selinux-policy version to address new SBUS
  symlinks.

[1.6.2-2]
- Remove %files reference to sss_debuglevel copied from wrong upstreeam
  spec file.

[1.6.2-1]
- Improved handling of users and groups with multi-valued name attributes
  (aliases)
- Performance enhancements
    Initgroups on RFC2307bis/FreeIPA
    HBAC rule processing
- Improved process-hang detection and restarting
- Enabled the midpoint cache refresh by default (fewer cache misses on
  commonly-used entries)
- Cleaned up the example configuration
- New tool to change debug level on the fly

[1.6.1-1]
- New upstream release 1.6.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
- Fixes a serious issue with LDAP connections when the communication is
  dropped (e.g. VPN disconnection, waking from sleep)
- SSSD is now less strict when dealing with users/groups with multiple names
  when a definitive primary name cannot be determined
- The LDAP provider will no longer attempt to canonicalize by default when
  using SASL. An option to re-enable this has been provided.
- Fixes for non-standard LDAP attribute names (e.g. those used by Active
  Directory)
- Three HBAC regressions have been fixed.
- Fix for an infinite loop in the deref code

[1.6.0-2]
- Build with _hardened_build macro

[1.6.0-1]
- New upstream release 1.6.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
- Add host access control support for LDAP (similar to pam_host_attr)
- Finer-grained control on principals used with Kerberos (such as for FAST or
- validation)
- Added a new tool sss_cache to allow selective expiring of cached entries
- Added support for LDAP DEREF and ASQ controls
- Added access control features for Novell Directory Server
- FreeIPA dynamic DNS update now checks first to see if an update is needed
- Complete rewrite of the HBAC library
- New libraries: libipa_hbac and libipa_hbac-python

[1.5.11-2]
- New upstream release 1.5.11
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
- Fix a serious regression that prevented SSSD from working with ldaps:// URIs
- IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
- address being saved to the AAAA record

[1.5.10-1]
- New upstream release 1.5.10
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
- Fixed a regression introduced in 1.5.9 that could result in blocking calls
- to LDAP

[1.5.9-1]
- New upstream release 1.5.9
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
- Support for overriding home directory, shell and primary GID locally
- Properly honor TTL values from SRV record lookups
- Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
- servers)
- Properly escape IPv6 addresses in the failover code
- Do not crash if inotify fails (e.g. resource exhaustion)
- Don't add multiple TGT renewal callbacks (too many log messages)

[1.5.8-1]
- New upstream release 1.5.8
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
- Support for the LDAP paging control
- Support for multiple DNS servers for name resolution
- Fixes for several group membership bugs
- Fixes for rare crash bugs

[1.5.7-3]
- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
- Make sure to properly convert to systemd if upgrading from newer
- updates for Fedora 14

[1.5.7-2]
- Fix segfault in TGT renewal

[1.5.7-1]
- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
-                         cached password with predicatable filename

[1.5.6.1-1]
- Re-add manpage translations

[1.5.6-1]
- New upstream release 1.5.6
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
- Fixed a serious memory leak in the memberOf plugin
- Fixed a regression with the negative cache that caused it to be essentially
- nonfunctional
- Fixed an issue where the user's full name would sometimes be removed from
- the cache
- Fixed an issue with password changes in the kerberos provider not working
- with kpasswd

[1.5.5-5]
- Resolves: rhbz#697057 - kpasswd fails when using sssd and
-                         kadmin server != kdc server
- Upgrades from SysV should now maintain enabled/disabled status

[1.5.5-4]
- Fix %postun

[1.5.5-3]
- Fix systemd conversion. Upgrades from SysV to systemd weren't properly
- enabling the systemd service.
- Fix a serious memory leak in the memberOf plugin
- Fix an issue where the user's full name would sometimes be removed
- from the cache

[1.5.5-2]
- Install systemd unit file instead of sysv init script

[1.5.5-1]
- New upstream release 1.5.5
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
- Fixes for several crash bugs
- LDAP group lookups will no longer abort if there is a zero-length member
- attribute
- Add automatic fallback to 'cn' if the 'gecos' attribute does not exist

[1.5.4-1]
- New upstream release 1.5.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
- Fixes for Active Directory when not all users and groups have POSIX attributes
- Fixes for handling users and groups that have name aliases (aliases are ignored)
- Fix group memberships after initgroups in the IPA provider

[1.5.3-2]
- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication

[1.5.3-1]
- New upstream release 1.5.3
- Support for libldb &gt;= 1.0.0

[1.5.2-1]
- New upstream release 1.5.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
- Fixes for support of FreeIPA v2
- Fixes for failover if DNS entries change
- Improved sss_obfuscate tool with better interactive mode
- Fix several crash bugs
- Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
- Delete users from the local cache if initgroups calls return 'no such user'
- (previously only worked for getpwnam/getpwuid)
- Use new Transifex.net translations
- Better support for automatic TGT renewal (now survives restart)
- Netgroup fixes

[1.5.1-9]
- Rebuild sssd against libldb 1.0.2 so the memberof module loads again.
- Related: rhbz#677425

[1.5.1-8]
- Resolves: rhbz#677768 - name service caches names, so id command shows
-                         recently deleted users

[1.5.1-7]
- Ensure that SSSD builds against libldb-1.0.0 on F15 and later
- Remove .la for memberOf

[1.5.1-6]
- Fix memberOf install path

[1.5.1-5]
- Add support for libldb 1.0.0

[1.5.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[1.5.1-3]
- Fix nested group member filter sanitization for RFC2307bis
- Put translated tool manpages into the sssd-tools subpackage

[1.5.1-2]
- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during
- rpmbuild

[1.5.1-1]
- New upstream release 1.5.1
- Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
- Vast performance improvements when enumerate = true
- All PAM actions will now perform a forced initgroups lookup instead of just
- a user information lookup
-   This guarantees that all group information is available to other
-   providers, such as the simple provider.
- For backwards-compatibility, DNS lookups will also fall back to trying the
- SSSD domain name as a DNS discovery domain.
- Support for more password expiration policies in LDAP
-    389 Directory Server
-    FreeIPA
-    ActiveDirectory
- Support for ldap_tls_{cert,key,cipher_suite} config options
-Assorted bugfixes

[1.5.0-2]
- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins

[1.5.0-1]
- New upstream release 1.5.0
- Fixed issues with LDAP search filters that needed to be escaped
- Add Kerberos FAST support on platforms that support it
- Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
- Added a Kerberos access provider to honor .k5login
- Addressed several thread-safety issues in the sss_client code
- Improved support for delayed online Kerberos auth
- Significantly reduced time between connecting to the network/VPN and
- acquiring a TGT
- Added feature for automatic Kerberos ticket renewal
- Provides the kerberos ticket for long-lived processes or cron jobs
- even when the user logs out
- Added several new features to the LDAP access provider
- Support for 'shadow' access control
- Support for authorizedService access control
- Ability to mix-and-match LDAP access control features
- Added an option for a separate password-change LDAP server for those
- platforms where LDAP referrals are not supported
- Added support for manpage translations

[1.4.1-3]
- Solve a shutdown race-condition that sometimes left processes running
- Resolves: rhbz#606887 - SSSD stops on upgrade

[1.4.1-2]
- Log startup errors to the syslog
- Allow cache cleanup to be disabled in sssd.conf

[1.4.1-1]
- New upstream release 1.4.1
- Add support for netgroups to the proxy provider
- Fixes a minor bug with UIDs/GIDs &gt;= 2^31
- Fixes a segfault in the kerberos provider
- Fixes a segfault in the NSS responder if a data provider crashes
- Correctly use sdap_netgroup_search_base

[1.4.0-2]
- Fix incorrect tarball URL

[1.4.0-1]
- New upstream release 1.4.0
- Added support for netgroups to the LDAP provider
- Performance improvements made to group processing of RFC2307 LDAP servers
- Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
- Build-system improvements to support Gentoo
- Split out several libraries into the ding-libs tarball
- Manpage reviewed and updated

[1.3.0-35]
- Fix pre and post script requirements

[1.3.0-34]
- Resolves: rhbz#606887 - sssd stops on upgrade

[1.3.0-33]
- Resolves: rhbz#626205 - Unable to unlock screen

[1.3.0-32]
- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
-                         doesn't require it

[1.3.0-31]
- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib

[1.3.0-30]
- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
-                           against LDAP

[1.2.91-21]
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild

[1.2.91-20]
- New upstream version 1.2.91 (1.3.0rc1)
- Improved LDAP failover
- Synchronous sysdb API (provides performance enhancements)
- Better online reconnection detection

[1.2.1-15]
- New stable upstream version 1.2.1
- Resolves: rhbz#595529 - spec file should eschew %define in favor of
-                         %global
- Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
-                         to fail while restart.
- Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
-                         keyring
- Resolves: rhbz#599724 - sssd is broken on Rawhide

[1.2.0-12]
- New stable upstream version 1.2.0
- Support ServiceGroups for FreeIPA v2 HBAC rules
- Fix long-standing issue with auth_provider = proxy
- Better logging for TLS issues in LDAP

[1.1.92-11]
- New LDAP access provider allows for filtering user access by LDAP attribute
- Reduced default timeout for detecting offline status with LDAP
- GSSAPI ticket lifetime made configurable
- Better offline-&gt;online transition support in Kerberos

[1.1.91-10]
- Release new upstream version 1.1.91
- Enhancements when using SSSD with FreeIPA v2
- Support for deferred kinit
- Support for DNS SRV records for failover

[1.1.1-3]
- Bump up release number to avoid library sub-packages version issues with
  previous releases.

[1.1.1-1]
- New upstream release 1.1.1
- Fixed the IPA provider (which was segfaulting at start)
- Fixed a bug in the SSSDConfig API causing some options to revert to
- their defaults
- This impacted the Authconfig UI
- Ensure that SASL binds to LDAP auto-retry when interrupted by a signal

[1.1.0-2]
- Release SSSD 1.1.0 final
- Fix two potential segfaults
- Fix memory leak in monitor
- Better error message for unusable confdb

[1.1.0-1.pre20100317git0ea7f19]
- Release candidate for SSSD 1.1
- Add simple access provider
- Create subpackages for libcollection, libini_config, libdhash and librefarray
- Support IPv6
- Support LDAP referrals
- Fix cache issues
- Better feedback from PAM when offline

[1.0.5-2]
- Rebuild against new libtevent

[1.0.5-1]
- Fix licenses in sources and on RPMs

[1.0.4-1]
- Fix regression on 64-bit platforms

[1.0.3-1]
- Fixes link error on platforms that do not do implicit linking
- Fixes double-free segfault in PAM
- Fixes double-free error in async resolver
- Fixes support for TCP-based DNS lookups in async resolver
- Fixes memory alignment issues on ARM processors
- Manpage fixes

[1.0.2-1]
- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
- Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
- Several segfault bugfixes

[1.0.1-1]
- Fix CVE-2010-0014

[1.0.0-2]
- Patch SSSDConfig API to address
- https://bugzilla.redhat.com/show_bug.cgi?id=549482

[1.0.0-1]
- New upstream stable release 1.0.0

[0.99.1-1]
- New upstream bugfix release 0.99.1

[0.99.0-1]
- New upstream release 0.99.0

[0.7.1-1]
- Fix segfault in sssd_pam when cache_credentials was enabled
- Update the sample configuration
- Fix upgrade issues caused by data provider service removal

[0.7.0-2]
- Fix upgrade issues from old (pre-0.5.0) releases of SSSD

[0.7.0-1]
- New upstream release 0.7.0

[0.6.1-2]
- Fix missing file permissions for sssd-clients

[0.6.1-1]
- Add SSSDConfig API
- Update polish translation for 0.6.0
- Fix long timeout on ldap operation
- Make dp requests more robust

[0.6.0-1]
- Ensure that the configuration upgrade script always writes the config
  file with 0600 permissions
- Eliminate an infinite loop in group enumerations

[0.6.0-0]
- New upstream release 0.6.0

[0.5.0-0]
- New upstream release 0.5.0

[0.4.1-4]
- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
  without a password. (Patch by Stephen Gallagher)

[0.4.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[0.4.1-2]
- Fix a couple of segfaults that may happen on reload

[0.4.1-1]
- add missing configure check that broke stopping the daemon
- also fix default config to add a missing required option

[0.4.1-0]
- latest upstream release.
- also add a patch that fixes debugging output (potential segfault)

[0.3.2-2]
- release out of the official 0.3.2 tarball

[0.3.2-1]
- bugfix release 0.3.2
- includes previous release patches
- change permissions of the /etc/sssd/sssd.conf to 0600

[0.3.1-2]
- Add last minute bug fixes, found in testing the package

[0.3.1-1]
- Version 0.3.1
- includes previous release patches

[0.3.0-2]
- Try to fix build adding automake as an explicit BuildRequire
- Add also a couple of last minute patches from upstream

[0.3.0-1]
- Version 0.3.0
- Provides file based configuration and lots of improvements

[0.2.1-1]
- Version 0.2.1

[0.2.0-1]
- Version 0.2.0

[0.1.0-5.20090309git691c9b3]
- package git snapshot

[0.1.0-4]
- fixed items found during review
- added initscript

[0.1.0-3]
- added sss_client

[0.1.0-2]
- Small cleanup and fixes in the spec file

[0.1.0-1]
- Initial release (based on version 0.1.0 upstream code)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-3148.html" type="self" title="ELBA-2024-3148" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="sssd" version="2.9.4" release="2.0.1.el8" epoch="0" arch="src">
          <filename>sssd-2.9.4-2.0.1.el8.src.rpm</filename>
          <sum type="sha256">100ad9db9dd060e22b8d2e553d228646c75497f4d15b447902ac33f3cdd03546</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4589</id>
    <title>libsemanage bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.9-3]
- Fsync final files before rename (#1838762)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4589.html" type="self" title="ELBA-2020-4589" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libsemanage" version="2.9" release="3.el8" epoch="0" arch="src">
          <filename>libsemanage-2.9-3.el8.src.rpm</filename>
          <sum type="sha256">24ff6d1b6d5d4030752b2d5f9ec97e1ef7022e5e334950b0d2ce91a333fcf499</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-16166</id>
    <title> perl-Pod-Simple  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-01-17 00:00:00"/>
    <updated date="2023-01-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[1:3.42-1]
- 3.42 bump

[1:3.41-459]
- update to 3.41
- I left release at the artificially high value in case it was needed

[1:3.40-458]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1:3.40-457]
- Perl 5.32 re-rebuild of bootstrapped packages

[1:3.40-456]
- Increase release to favour standalone package

[1:3.40-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1:3.40-1]
- update to 3.40

[1:3.39-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1:3.39-1]
- 3.39 bump

[1:3.38-2]
- Perl 5.30 re-rebuild of bootstrapped packages

[1:3.38-1]
- 3.38 bump

[1:3.37-2]
- Do not package Pod::Escapes (upstream bug #102)

[1:3.37-1]
- update to 3.37

[1:3.36-2]
- Perl 5.30 rebuild

[1:3.36-1]
- 3.36 bump

[1:3.35-418]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1:3.35-417]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1:3.35-416]
- Increase release to favour standalone package

[1:3.35-395]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1:3.35-394]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1:3.35-393]
- Perl 5.26 rebuild

[1:3.35-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1:3.35-1]
- 3.35 bump

[1:3.32-365]
- Increase release to favour standalone package

[1:3.32-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1:3.32-2]
- Specify all dependencies

[1:3.32-1]
- update to 3.32

[1:3.31-1]
- update to 3.31

[1:3.30-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1:3.30-2]
- Perl 5.22 rebuild

[1:3.30-1]
- 3.30 bump

[1:3.29-1]
- 3.29 bump

[1:3.28-310]
- Increase release to favour standalone package

[1:3.28-294]
- Perl 5.20 rebuild

[1:3.28-293]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1:3.28-292]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1:3.28-291]
- Specify all dependencies

[1:3.28-290]
- Increase release to favour standalone package

[1:3.28-3]
- Link minimal build-root packages against libperl.so explicitly

[1:3.28-2]
- Specify all dependencies

[1:3.28-1]
- 3.28 bump

[1:3.26-1]
- Specfile autogenerated by cpanspec 1.78.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-16166.html" type="self" title="ELBA-2023-16166" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="perl-Pod-Simple" version="3.42" release="1.el8" epoch="1" arch="src">
          <filename>perl-Pod-Simple-3.42-1.el8.src.rpm</filename>
          <sum type="sha256">51d5d01917afecb89c63e24699133b335166f182aa16994c4df2a8e3b56b2033</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-3026</id>
    <title>ModemManager bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-23 00:00:00"/>
    <updated date="2023-05-23 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>libmbim
[1.28.2-1]
- Update to 1.28.2

libqmi
[1.32.2-3]
- Update to 1.32.2
- Build without QRTR

ModemManager
[1.20.2-1]
- Update to 1.20.2</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-3026.html" type="self" title="ELBA-2023-3026" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libmbim" version="1.28.2" release="1.el8" epoch="0" arch="src">
          <filename>libmbim-1.28.2-1.el8.src.rpm</filename>
          <sum type="sha256">e421770e8a25cbb55354d0646fafc1d2ab232633ca5b0a31d6361a137a9654ac</sum>
        </package>
        <package name="libqmi" version="1.32.2" release="3.el8" epoch="0" arch="src">
          <filename>libqmi-1.32.2-3.el8.src.rpm</filename>
          <sum type="sha256">617f1640b19beb7e73613b9ef6528c1ac8039b821d066b2e411673b88f24b18f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2019-3468</id>
    <title>sblim-indication_helper bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2019-11-14 00:00:00"/>
    <updated date="2019-11-14 00:00:00"/>
    <rights>Copyright 2019 Oracle, Inc.</rights>
    <description>[0.5.0-2]
- Rebuild to enable and pass CI gating

[0.5.0-1]
- Update to latest upstream version
- Change license to Eclipse Public License 1.0
- Use %license
- Fix URL

[0.4.2-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[0.4.2-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.4.2-20]
- Add BuildRequires gcc and gcc-c++
- Remove Group tag
- Minor spec fixes

[0.4.2-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.4.2-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[0.4.2-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0.4.2-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.4.2-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.4.2-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0.4.2-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[0.4.2-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0.4.2-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[0.4.2-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[0.4.2-9]
- Fix mixed use of spaces and tabs in specfile

[0.4.2-8]
- Fix issues found by fedora-review utility in the spec file

[0.4.2-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[0.4.2-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[0.4.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[0.4.2-4]
-  fixed the build failure because of missing definition of stderr

[0.4.2-3]
- fixed the rpmlint message. Removed Requries for glibc-devel.

[0.4.2-1]
- Standardized the spec file and changed the build number to 1

[0.4.2-134]
- update for Fedora packaging guidelines

* Fri May 30 2008 npaxton@novell.com
- Change openwbem-devel dependency to sblim-cmpi-devel, to be
  cimom neutral

* Wed Feb 27 2008 crrodriguez@suse.de
- fix library-without-ldconfig* errors
- disable static libraries

* Wed Mar 01 2006 mrueckert@suse.de
- update to 0.4.2
  ind_helper.c, ind_helper.h:
  Bugs: 1203849 (side effect) made a lot of function arguments
  const in order to remove the cmpi-base warnings.
  added sblim-indication_helper-0.4.2_warnings.patch
  fixes a small warning regarding pointer size

* Wed Jan 25 2006 mls@suse.de
- created the package</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2019-3468.html" type="self" title="ELBA-2019-3468" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="sblim-indication_helper" version="0.5.0" release="2.el8" epoch="0" arch="src">
          <filename>sblim-indication_helper-0.5.0-2.el8.src.rpm</filename>
          <sum type="sha256">8a47b9a2dadef243c6ab48cd60da8f416ce65088e9aa14c03efa00ad78d2f457</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4631</id>
    <title>gom bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.4-1]
+ gom-0.4-1
- Update to 0.4
Related: rhbz#1804171</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4631.html" type="self" title="ELBA-2020-4631" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="gom" version="0.4" release="1.el8" epoch="0" arch="src">
          <filename>gom-0.4-1.el8.src.rpm</filename>
          <sum type="sha256">0234e7a6add79201b78bf4ae737c4cacc47fc482b82002c6cdb15768c05d82b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-1708</id>
    <title> liblouis security and bug fix update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-05 00:00:00"/>
    <updated date="2020-05-05 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.6.2-21]
- A further Coverity fix (#1602585)

[2.6.2-20]
- Fix buffer overruns found by Coverity (#1602585)

[2.6.2-19]
- Fix two issues found by Coverity (#1602585)

[2.6.2-18]
- Apply patch for CVE-2018-12085 (#1589942)

[2.6.2-17]
- Fix CVE-2018-11577 (#1585906)
- Fix CVE-2018-11684 (#1588632)
- Fix CVE-2018-11685 (#1588637)
- Fix CVE-2018-12085 (#1589942)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-1708.html" type="self" title="ELSA-2020-1708" />
      <reference href="https://linux.oracle.com/cve/CVE-2018-11577.html" id="CVE-2018-11577" type="cve" title="CVE-2018-11577" />
      <reference href="https://linux.oracle.com/cve/CVE-2018-11684.html" id="CVE-2018-11684" type="cve" title="CVE-2018-11684" />
      <reference href="https://linux.oracle.com/cve/CVE-2018-11685.html" id="CVE-2018-11685" type="cve" title="CVE-2018-11685" />
      <reference href="https://linux.oracle.com/cve/CVE-2018-12085.html" id="CVE-2018-12085" type="cve" title="CVE-2018-12085" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="liblouis" version="2.6.2" release="21.el8" epoch="0" arch="src">
          <filename>liblouis-2.6.2-21.el8.src.rpm</filename>
          <sum type="sha256">44b6a38d69e15d0e1f01e097d1fcd745b410e6c321532232704a7f9d6924d135</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-1940</id>
    <title>egl-wayland bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-17 00:00:00"/>
    <updated date="2022-05-17 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.1.9-3]
- Add upstream commits

[1.1.9-2]
- Add 15_nvidia_gbm.json

[1.1.9-1]
- Update to 1.1.9

[1.1.8-1]
- Update to 1.1.8

[1.1.7-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-1940.html" type="self" title="ELBA-2022-1940" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="egl-wayland" version="1.1.9" release="3.el8" epoch="0" arch="src">
          <filename>egl-wayland-1.1.9-3.el8.src.rpm</filename>
          <sum type="sha256">5625d21381af87a7d65e5598a7a968c6ea75d09b9e452139b3aa9617d9f0f4e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-7041</id>
    <title>liblouis bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-17 00:00:00"/>
    <updated date="2023-11-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.6.2-23]
- Resolves: RHEL-593 Bump the release to fix the upgrade path

[2.6.2-22]
- Fix CVE-2018-11683 (#1588626)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-7041.html" type="self" title="ELBA-2023-7041" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="liblouis" version="2.6.2" release="23.el8" epoch="0" arch="src">
          <filename>liblouis-2.6.2-23.el8.src.rpm</filename>
          <sum type="sha256">1451373bae6057d96773ae239966b987509e099ada564cc4ccaef1257cf90dee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2019-3492</id>
    <title>jna bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2019-11-14 00:00:00"/>
    <updated date="2019-11-14 00:00:00"/>
    <rights>Copyright 2019 Oracle, Inc.</rights>
    <description>[4.5.1-5]
- Onboard gating and move to AppStream</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2019-3492.html" type="self" title="ELBA-2019-3492" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="jna" version="4.5.1" release="5.el8" epoch="0" arch="src">
          <filename>jna-4.5.1-5.el8.src.rpm</filename>
          <sum type="sha256">789b17cb5735ff702d434b3176e34ee1dacde9a5ea14bb9026a1a7b36aaf94aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4651</id>
    <title>evince bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[3.28.4-7]
- Set 'application-id' property for evinces GApplication
- to 'org.gnome.evince.Application' to avoid a critical warning.
- Resolves: #1842017

[3.28.4-6]
- Move annotation popup window to new position
- Resolves: #1450700

[3.28.4-5]
- Set a11y names for annotation buttons
- Backport their translations
- Resolves: #1719328</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4651.html" type="self" title="ELBA-2020-4651" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="evince" version="3.28.4" release="7.el8" epoch="0" arch="src">
          <filename>evince-3.28.4-7.el8.src.rpm</filename>
          <sum type="sha256">2712355ff37f104b7b167ce383b2f424cfd810d105e30c97f209467474edf799</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-4381</id>
    <title> GNOME security, bug fix, and enhancement update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>accountsservice
[0.6.55-2]
- Add support for user templates so user can specify default session
  Resolves: #1812788

gdm
[40.0-14]
- Fix XDMCP
  Resolves: #2004170
- Fix crash at shutdown
  Related: #2004170

[40.0-13]
- Disable Wayland on HyperV
- Fix Xorg fallback
  Related: #1998989

[40.0-12]
- Redisable on server chips since rebase
  Related: #1909300

[40.0-11]
- Read session settings from users even if theyve never saved
  before. Needed to support accountsservice templated user
  defaults.
  Related: #1812788

[40.0-10]
- Let customers using vendor nvidia driver choose wayland sessions
  Resolves: #1962211
- Drop unused patches

[40.0-3]
- Disable network items on login screen
  Resolves: #1935261

[40.0-2]
- Fix workaround for systemd bug thats breaking X11 fallback
  Resolves: #1962049

[40.0-1]
- Rebase to 40.0
  Resolves: #1909300

gnome-autoar
[0.2.3-2]
- CVE-2020-36241, CVE-2021-28650: Do not allow symlink in parents (rhbz#1928701)

gnome-calculator
[3.28.2-2]
- Allow disabling downloading by setting refresh interval to 0
  Resolves: #1957705

gnome-control-center
[3.28.2-28]
- Update pt_BR translations
- Resolves: #1978612

gnome-online-accounts
[3.28.2-3]
- Disable the Facebook and Foursquare providers
Resolves: #1951086, #1952136

gnome-session
[3.28.1-13.0.1]
- Update kiosk-session subpackage with Oracle references [Orabug: 32095108]

[3.28.1-13]
- Add patch to tell grub boot was successful when user is
  able to explicitly request shutdown/reboot.
  Resolves: #1914925

[3.28.1-12]
- Introduce gnome-wayland session to allow users that use
  Xorg on the login screen to try wayland for the user session.
  Related: #1962211

[3.28.1-11]
- Exclude kiosk-session from xsession subpackage
- Disable VT switching when kiosk-session is installed
  Related: #1955754

gnome-settings-daemon
[3.32.0-16]
- Update pt_BR translations
- Resolves: #1978612

[3.32.0-15]
- Keep auto-logout working inside VMs
  Resolves: #1904139

gnome-shell
[3.32.2-40]
- Add bugs introduced in backport for #1651378
  Related: #1999758
- Tidy up patch list a bit

[3.32.2-39]
- Allow extensions on the login screen
  Related: #1651378

[3.32.2-38]
- Only mask text in password entries
  Resolves: #1987233

[3.32.2-37]
- Only warn once when not running under GDM
  Resolves: #1980661

[3.32.2-36]
- Add ability to lock down password showing
  Resolves: #1770302
- Add requires on newer mutter version
  Related: #1937866

[3.32.2-35]
- Improve style of window preview close buttons
  Resolves: #1981420

[3.32.2-34]
- Add PolicyKit-authentication-agent virtual provides
  Resolves: #1978287

[3.32.2-33]
- Fix warnings on unlock
  Resolves: #1971534
- Fix gdm lock screen
  Resolves: #1971507

[3.32.2-32]
- Fix network secret requests on login screen
  Related: #1935261

[3.32.2-31]
- Backport of touch mode
  Resolves: #1937866

gnome-shell-extensions
[3.32.1-20]
- Add extension for displaying heads up message
  Related: #1651378

[3.32.1-19]
- Dont use status icon wm_class as top bar role
  Resolves: #1897932

[3.32.1-18]
- Add gesture-inhibitor extension
  Resolves: #1854679

[3.32.1-17]
- Handle touchscreens on Wayland in the desktop-icons extension
  Resolves: #1924725

[3.32.1-16]
- Fix opening files with (wrongly) set executable bit
  Resolves: #1813727

gnome-software
[3.36.1-10]
- Resolves: #1978505 (Development package is missing important header files)

[3.36.1-9]
- Resolves: #1972545 (flatpak: Prefer runtime from the same origin as the application)

[3.36.1-8]
- Resolves: #1888404 (Updates page hides ongoing updates on refresh)

[3.36.1-7]
- Resolves: #1873297 (Crash when run as root)

[3.36.1-6]
- Resolves: #1791478 (Cannot completely disable ODRS (GNOME Ratings))

gsettings-desktop-schemas
[3.32.0-6]
- Add setting for locking down Show Password in entries
  Related: #1770302

gtk3
[3.22.30-8]
- Make reftests work in a vm

[3.22.30-7]
- Only mention Emoji in context menus when requested (rhbz#1893196)
- Fix warnings from non-overlay scrollbars (rhbz#1873488)

LibRaw
[0.19.5-3]
- Backport fix for CVE-2020-24870 from upstream
Resolves: #1931841

mutter
[3.32.2-60]
- Backport fix avoiding DND regression
  Resolves: #1999120

[3.32.2-59]
- Backport fixes avoiding frozen partly off-screen clients
  Resolves: #1989035

[3.32.2-58]
- Backport xauth and xhost patches
  Resolves: #1949176

vino
[3.22.0-11]
- Fix crashes under FIPS
- Resolves: #1960705

webkit2gtk3
[2.32.3-2]
- Fix CVE-2021-30858
- Resolves: #2006428

[2.32.3-1]
- Update to 2.32.3
- Related: #1937416

[2.32.2-1]
- Update to 2.32.2
- Related: #1937416

[2.32.1-1]
- Update to 2.32.1
- Related: #1937416

[2.32.0-1]
- Update to 2.32.0
- Related: #1937416
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-4381.html" type="self" title="ELSA-2021-4381" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-13558.html" id="CVE-2020-13558" type="cve" title="CVE-2020-13558" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-24870.html" id="CVE-2020-24870" type="cve" title="CVE-2020-24870" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-27918.html" id="CVE-2020-27918" type="cve" title="CVE-2020-27918" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-29623.html" id="CVE-2020-29623" type="cve" title="CVE-2020-29623" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-36241.html" id="CVE-2020-36241" type="cve" title="CVE-2020-36241" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-1765.html" id="CVE-2021-1765" type="cve" title="CVE-2021-1765" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-1788.html" id="CVE-2021-1788" type="cve" title="CVE-2021-1788" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-1789.html" id="CVE-2021-1789" type="cve" title="CVE-2021-1789" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-1799.html" id="CVE-2021-1799" type="cve" title="CVE-2021-1799" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-1801.html" id="CVE-2021-1801" type="cve" title="CVE-2021-1801" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-1844.html" id="CVE-2021-1844" type="cve" title="CVE-2021-1844" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-1870.html" id="CVE-2021-1870" type="cve" title="CVE-2021-1870" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-1871.html" id="CVE-2021-1871" type="cve" title="CVE-2021-1871" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-21775.html" id="CVE-2021-21775" type="cve" title="CVE-2021-21775" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-21779.html" id="CVE-2021-21779" type="cve" title="CVE-2021-21779" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-21806.html" id="CVE-2021-21806" type="cve" title="CVE-2021-21806" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28650.html" id="CVE-2021-28650" type="cve" title="CVE-2021-28650" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30663.html" id="CVE-2021-30663" type="cve" title="CVE-2021-30663" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30665.html" id="CVE-2021-30665" type="cve" title="CVE-2021-30665" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30682.html" id="CVE-2021-30682" type="cve" title="CVE-2021-30682" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30689.html" id="CVE-2021-30689" type="cve" title="CVE-2021-30689" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30720.html" id="CVE-2021-30720" type="cve" title="CVE-2021-30720" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30734.html" id="CVE-2021-30734" type="cve" title="CVE-2021-30734" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30744.html" id="CVE-2021-30744" type="cve" title="CVE-2021-30744" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30749.html" id="CVE-2021-30749" type="cve" title="CVE-2021-30749" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30758.html" id="CVE-2021-30758" type="cve" title="CVE-2021-30758" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30795.html" id="CVE-2021-30795" type="cve" title="CVE-2021-30795" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30797.html" id="CVE-2021-30797" type="cve" title="CVE-2021-30797" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-30799.html" id="CVE-2021-30799" type="cve" title="CVE-2021-30799" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="gdm" version="40.0" release="15.el8" epoch="1" arch="src">
          <filename>gdm-40.0-15.el8.src.rpm</filename>
          <sum type="sha256">e9a28dccb527a9e9e748c984327d1bc6de7aa6a3345bd1de05de33dbc4d17905</sum>
        </package>
        <package name="gnome-autoar" version="0.2.3" release="2.el8" epoch="0" arch="src">
          <filename>gnome-autoar-0.2.3-2.el8.src.rpm</filename>
          <sum type="sha256">177828cc35e8b52bab9b1b2a14ab4910da1bef609418638ce5687c3762cc283e</sum>
        </package>
        <package name="gnome-settings-daemon" version="3.32.0" release="16.el8" epoch="0" arch="src">
          <filename>gnome-settings-daemon-3.32.0-16.el8.src.rpm</filename>
          <sum type="sha256">2aba7f065534d25c9b12d13903d8e44cd8420b331536b97560ed4cd8dda6c6de</sum>
        </package>
        <package name="gtk3" version="3.22.30" release="8.el8" epoch="0" arch="src">
          <filename>gtk3-3.22.30-8.el8.src.rpm</filename>
          <sum type="sha256">192335689794374d2eb77c036e3ca82d89e6bba67a9e572c81e01b342139a277</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-1871</id>
    <title>corosync bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-17 00:00:00"/>
    <updated date="2022-05-17 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[3.1.5-2]
- Resolves: rhbz#2002115
- Resolves: rhbz#2024658

- totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
- merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
- totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
- merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-1871.html" type="self" title="ELBA-2022-1871" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync" version="3.1.5" release="2.el8" epoch="0" arch="src">
          <filename>corosync-3.1.5-2.el8.src.rpm</filename>
          <sum type="sha256">101f8eaa0388a5cc5352677a64a4df05d282a0cd4ad007dfa79df61553d2c5e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-1965</id>
    <title>plymouth bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-17 00:00:00"/>
    <updated date="2022-05-17 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[0.9.4-11.git1688935.0.1]
- Changed description in specfile

[0.9.4-11.git1688935]
- Fix typo in --with-runtimedir argument to actually stop using
  /var/run and instead use /run instead
  Resolves: #2056473
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-1965.html" type="self" title="ELBA-2022-1965" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="plymouth" version="0.9.4" release="11.20200615git1e36e30.0.1.el8" epoch="0" arch="src">
          <filename>plymouth-0.9.4-11.20200615git1e36e30.0.1.el8.src.rpm</filename>
          <sum type="sha256">3a6626cef9f9af45158b034fb448f69400a86d43e6dabca257e433be9324a22a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-4735</id>
    <title>open-vm-tools bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[11.1.0-2.0.1]
- Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968]
- Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019]
- Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156]

[11.1.0-2.el8]
- Remove net-tools dependency [bz#1849459]
- Resolves: bz#1849459
  ([ESXi][RHEL8]Incorporate SDMP related fixes and removal of net-tools dependency)

[11.1.0-1.el8]
- Rebase to 11.1.0 [bz#1806677]
- Added open-vm-tools-sdmp package [bz#1833157)
- Resolves: bz#1806677
  ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.0 for RHEL 8.3)
- Resolves: bz#1833157
  ([ESXi][RHEL8]Add new open-vm-tools-sdmp package for RHEL 8.3)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-4735.html" type="self" title="ELEA-2020-4735" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="open-vm-tools" version="11.1.0" release="2.0.1.el8" epoch="0" arch="src">
          <filename>open-vm-tools-11.1.0-2.0.1.el8.src.rpm</filename>
          <sum type="sha256">ce2dccc90c5c338dd756e0610e68cb23b5d1e105b13c43d930ac315182c808f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9578</id>
    <title> corosync  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-07-08 00:00:00"/>
    <updated date="2022-07-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[3.1.5-2]
- Resolves: rhbz#2002115
- Resolves: rhbz#2024658

- totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
- merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
- totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
- merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9578.html" type="self" title="ELBA-2022-9578" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync" version="3.1.5" release="2.el8" epoch="0" arch="src">
          <filename>corosync-3.1.5-2.el8.src.rpm</filename>
          <sum type="sha256">101f8eaa0388a5cc5352677a64a4df05d282a0cd4ad007dfa79df61553d2c5e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-1801</id>
    <title> gfbgraph security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-17 00:00:00"/>
    <updated date="2022-05-17 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[0.2.4-1]
- Update to 0.2.4
Resolves: #1997941</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-1801.html" type="self" title="ELSA-2022-1801" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-39358.html" id="CVE-2021-39358" type="cve" title="CVE-2021-39358" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="gfbgraph" version="0.2.4" release="1.el8" epoch="0" arch="aarch64">
          <filename>gfbgraph-0.2.4-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e07d161d68966ed178abb7f577e85b470ac994299d14a25ffb24f2c0a72423ae</sum>
        </package>
        <package name="gfbgraph" version="0.2.4" release="1.el8" epoch="0" arch="src">
          <filename>gfbgraph-0.2.4-1.el8.src.rpm</filename>
          <sum type="sha256">3599685cab3a8df2330aa22620210e02b31f1877ab8e04e7f86a0cd4f0e2e4c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2019-3507</id>
    <title>qpdf bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2019-11-14 00:00:00"/>
    <updated date="2019-11-14 00:00:00"/>
    <rights>Copyright 2019 Oracle, Inc.</rights>
    <description>[7.1.1-10]
- used bad define in previous commit

[7.1.1-9]
- 1605101 - qpdf: should not re-implement crypto - episode II - relaxing crypto for decrypt

[7.1.1-8]
- 1605101 - qpdf: should not re-implement crypto</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2019-3507.html" type="self" title="ELBA-2019-3507" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="qpdf" version="7.1.1" release="10.el8" epoch="0" arch="src">
          <filename>qpdf-7.1.1-10.el8.src.rpm</filename>
          <sum type="sha256">7590557ded0d387bef995628c7b3c3acc51bb8328af8574520ff3e84dcfe870d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9580</id>
    <title> iniparser  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-07-19 00:00:00"/>
    <updated date="2022-07-19 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[4.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[4.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[4.1-2]
- Add symlinks for headers to be compitable with Debian (BZ#1635706)

[4.1-1]
- Update to 4.1 (BZ#1508863)

[4.0-6.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[4.0-5.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4.0-4.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[4.0-3.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4.0-2.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[4.0-1.20160821git]
- Update to 4.0 [git e24843b] (#1346451)
- Spec file maintenance

[3.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[3.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[3.1-4]
- resolves: #1031119 - Fix possible crash with crafted ini files.

[3.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[3.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[3.1-1]
- Update to 3.1
- Minor spec file changes according to the latest guidelines

[3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[3.0-1]
- Final 3.0 release

[3.0-0.4.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[3.0-0.3.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[3.0-0.2.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[3.0-0.1.b]
- change version number to reflect 'pre-release' status

[3.0b-3]
- ensure LICENSE file is installed

[3.0b-2]
- respond to review: added -fPIC to cflags, used 'install'

[3.0b-1]
- Initial packaging attempt</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9580.html" type="self" title="ELBA-2022-9580" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="iniparser" version="4.1" release="5.el8" epoch="0" arch="src">
          <filename>iniparser-4.1-5.el8.src.rpm</filename>
          <sum type="sha256">a1576e6ee66a754c749228469d3bf7be0de430a793b7f797d896a5162e0948c1</sum>
        </package>
        <package name="iniparser" version="4.1" release="5.el8" epoch="0" arch="aarch64">
          <filename>iniparser-4.1-5.el8.aarch64.rpm</filename>
          <sum type="sha256">661fece0b764c77509a728cdc93f898f4f1fd36bdd938943c51143d6e956de08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4691</id>
    <title>libgovirt bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.3.7-3]
- Fix content-type property name
  Resolves: rhbz#1847223

[0.3.7-2]
- Add support for storage domains 'disks' query
  Resolves: rhbz#1847223

[0.3.7-1]
- Rebase to latest upstream version
  Resolves: rhbz#1801226
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4691.html" type="self" title="ELBA-2020-4691" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libgovirt" version="0.3.7" release="3.el8" epoch="0" arch="src">
          <filename>libgovirt-0.3.7-3.el8.src.rpm</filename>
          <sum type="sha256">4eed17abf1a4a08ae3a62324ab73abc3678b4f6a43f4961d7af3a4ad77b06023</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4715</id>
    <title>chan bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.0.4-3]
- Initial version for RHEL-8, rebuild for CI/gating

[0.0.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4715.html" type="self" title="ELBA-2020-4715" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="chan" version="0.0.4" release="3.el8" epoch="0" arch="src">
          <filename>chan-0.0.4-3.el8.src.rpm</filename>
          <sum type="sha256">17b573b61c25dc22e868c7a7d709b87a3cf04700795cebb81275fd37279be46f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-7804</id>
    <title>libsemanage bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description> </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-7804.html" type="self" title="ELBA-2022-7804" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libsemanage" version="2.9" release="9.el8" epoch="0" arch="src">
          <filename>libsemanage-2.9-9.el8.src.rpm</filename>
          <sum type="sha256">9e1b8752aa3b4385238922e1bdc47e3b7a1f5b85e4d2ffa90b45963b9e4f92dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-1914</id>
    <title>libosinfo bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-17 00:00:00"/>
    <updated date="2022-05-17 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.9.0-3]
- Resolves: rhbz#2053272

[1.9.0-2]
- Resolves: rhbz#1902720</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-1914.html" type="self" title="ELBA-2022-1914" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libosinfo" version="1.9.0" release="3.el8" epoch="0" arch="src">
          <filename>libosinfo-1.9.0-3.el8.src.rpm</filename>
          <sum type="sha256">23cb625243511afad1f8d4884c7e8428e672fc1253ddae7aa08bf24742ea21bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-7807</id>
    <title>lldpad bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.0.1-19.git036e314]
- Update changelog (#1997064)

[1.0.1-18.git036e314]
- Fix dependency specification (#1997064)

[1.0.1-17.git036e314]
- Update to the latest branch-1.1, which includes config file fixes (#1997064)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-7807.html" type="self" title="ELBA-2022-7807" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="lldpad" version="1.0.1" release="19.git036e314.el8" epoch="0" arch="src">
          <filename>lldpad-1.0.1-19.git036e314.el8.src.rpm</filename>
          <sum type="sha256">1d967dff4667471e5b6ba641b42069f3d253d72431fe50a4e2961419034c771e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4734</id>
    <title>libblockdev bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.24-1.0.1]
- enable btrfs support [Orabug: 30792917]

[2.24-1]
- Rebased to the latest upstream release 2.24
  Resolves: rhbz#1824153</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4734.html" type="self" title="ELBA-2020-4734" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libblockdev" version="2.24" release="1.0.1.el8" epoch="0" arch="src">
          <filename>libblockdev-2.24-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">021e90b69aa77aa4b0826ce286d4a6cf469b15f0e7d04e7bfc98d4cfb488c3ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4736</id>
    <title>corosync bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[3.0.3-4]
- Resolves: rhbz#1780137
- Resolves: rhbz#1791792
- Resolves: rhbz#1809864
- Resolves: rhbz#1816653

- votequorum: Ignore the icmap_get_* return value (rhbz#1780137)
- merge upstream commit cddd62f972bca276c934e58f08da84071cec1ddb (rhbz#1780137)
- man: move cmap_keys man page from section 8 to 7 (rhbz#1791792)
- merge upstream commit f1d36307e524f9440733f0b01a9fc627a0e1cac7 (rhbz#1791792)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780137)
- merge upstream commit 8ce65bf951bc1e5b2d64b60ea027fbdc551d4fc8 (rhbz#1780137)
- stats: Add stats for scheduler misses (rhbz#1791792)
- merge upstream commit 48b6894ef41e9a06ccbb696d062d86ef60dc2c4b (rhbz#1791792)
- stats: Use nanoseconds from epoch for schedmiss (rhbz#1791792)
- merge upstream commit ebd05fa00826c366922e619b012a0684c6856539 (rhbz#1791792)
- main: Add schedmiss timestamp into message (rhbz#1791792)
- merge upstream commit 35662dd0ec53f456445c30c0ef92892f47b25aa2 (rhbz#1791792)
- votequorum: Change check of expected_votes (rhbz#1809864)
- merge upstream commit 0c16442f2d93f32a229b87d2672e2dc8025ec704 (rhbz#1809864)
- quorumtool: exit on invalid expected votes (rhbz#1809864)
- merge upstream commit 5f543465bb3506b7f4929a426f1c22a9c854cecd (rhbz#1809864)
- votequorum: set wfa status only on startup (rhbz#1816653)
- merge upstream commit ca320beac25f82c0c555799e647a47975a333c28 (rhbz#1816653)

[3.0.3-3]
- Resolves: rhbz#1828295

- Add explicit spausedd dependency for revdeps CI test</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4736.html" type="self" title="ELBA-2020-4736" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync" version="3.0.3" release="4.el8" epoch="0" arch="src">
          <filename>corosync-3.0.3-4.el8.src.rpm</filename>
          <sum type="sha256">6c91cd0deba0800712429075519e57217a7ff3a2162ac8f68a0a4c2c4126decd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9017</id>
    <title>sac  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-02-08 00:00:00"/>
    <updated date="2021-02-08 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.3-28]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.3-27]
- Elimitate race condition when injecting JAR manifest
- Resolves: rhbz#1495242

[1.3-26]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.3-25]
- Spec file modernisation to fix FTBFS

[1.3-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.3-23]
- Changed broken Source3: URL

[1.3-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.3-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.3-20]
- Resolves: rhbz#1107270 fix FTBFS

[1.3-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.3-18]
- Resolves: rhbz#1068513 switch to java-headless (build)requires

[1.3-17]
- Update for newer guidelines, rhbz #993211

[1.3-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.3-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[1.3-14]
- repack zip to drop jars

[1.3-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[1.3-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[1.3-11]
- Resolves: rhbz#715875 FTBFS

[1.3-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[1.3-9]
- Drop gcj.
- Adapt to current guidelines.

[1.3-8]
- add COPYING to all subpackages

[1.3-7]
- Fix spelling of my surname in %changelog.

[1.3-6]
- Add maven pom and metadata.

[1.3-5]
- make javadoc no-arch when building as arch-dependant aot

[1.3-4.3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[1.3-3.3]
- Add osgi manifest (needed by eclipse-birt).

[1.3-3.2]
- drop repotag

[1.3-3jpp.1]
- update for guidelines

[1.3-3jpp]
- import from jpackage

[1.3-3jpp]
- Rebuild with Ant 1.6.2

[1.3-2jpp]
- update for JPackage 1.5

[1.3-1jpp]
- Update to 1.3.
- Use sed instead of bash 2 extension when symlinking jars during build.
- Add Distribution tag, fix URL, tweak Summary and description.

[1.2-1jpp]
- first jpp release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9017.html" type="self" title="ELBA-2021-9017" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="sac" version="1.3" release="28.el8" epoch="0" arch="src">
          <filename>sac-1.3-28.el8.src.rpm</filename>
          <sum type="sha256">2f495f330afce4058af08e65b5bd874c253b94752059f1de51695d3866a63eb1</sum>
        </package>
        <package name="sac" version="1.3" release="28.el8" epoch="0" arch="noarch">
          <filename>sac-1.3-28.el8.noarch.rpm</filename>
          <sum type="sha256">d75c0978b3f86ab5ed1b1440286dcf0b685d7f987950bd659e526569ce525052</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-14820</id>
    <title> python-fasteners Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-01 00:00:00"/>
    <updated date="2022-06-01 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>  </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-14820.html" type="self" title="ELBA-2022-14820" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="python-fasteners" version="0.17" release="2.el8" epoch="0" arch="src">
          <filename>python-fasteners-0.17-2.el8.src.rpm</filename>
          <sum type="sha256">ca4ba32f4a32c099997659afc8bc76a86270aac64bc70a4bfc8f2a7890fedfd3</sum>
        </package>
        <package name="python3-fasteners" version="0.17" release="2.el8" epoch="0" arch="noarch">
          <filename>python3-fasteners-0.17-2.el8.noarch.rpm</filename>
          <sum type="sha256">cbe59d7056dbb11bc54c48eb8f2594f62eeb643a47b6da1432504a3209e5a493</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2022-6456</id>
    <title>gnome-settings-daemon bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-09-14 00:00:00"/>
    <updated date="2022-09-14 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[3.32.0-16.el8_6.1]
- Prevent automatic logout warning in greeter sessions
- Resolves: #2122964</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2022-6456.html" type="self" title="ELEA-2022-6456" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="gnome-settings-daemon" version="3.32.0" release="16.el8_6.1" epoch="0" arch="src">
          <filename>gnome-settings-daemon-3.32.0-16.el8_6.1.src.rpm</filename>
          <sum type="sha256">2698ddbd75e3673296f9eceaecd31b2ff5e8ecfce390e1dea490af6d0d8056df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4758</id>
    <title>libosinfo bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>gnome-boxes
[3.36.5-6]
- Start downloads on the Assistant when pressing ENTER
- Related: #1851089

[3.36.5-5]
- Disable 3D acceleration
- Related: #1856717

[3.36.5-4]
- Dont create a tooltip if the URL for the OS is null
- Related: #1851043

[3.36.5-3]
- Allow pasting URLs in the Assistant 'Download an OS' search
- Related: #1851089

[3.36.5-2]
- Recommend openssh-askpass
- Related: #1052945

[3.36.5-1]
- Rebase to 3.36.5

libosinfo
[1.8.0-1]
- Resolves: rhbz#1815158 - Rebase to libosinfo the latest upstream release
- Resolves: rhbz#1754394 - Provide information about UEFI support for guests (libosinfo)
- Resolves: rhbz#1032520 - WHQLed drivers should be made available for Boxes/libosinfo users

libvirt-glib
[3.0.0-1]
- Update to 3.0.0 release
- Resolves: rhbz#1754396 - Provide support for getting 'firmwares' info from Domain Capabilities
- Resolves: rhbz#1753670 - Enable bochs-display for UEFI guests (libvirt-glib)

osinfo-db
[20200813-1.0.1]
- Include links to Oracle 8.3 iso images to xml files [Orabug: 32013221]
- Add OL7.8 record [Orabug: 31142227]
- osinfo-db should include OL8.2 OL version [Orabug: 30962397]
- add extra oracle osinfo files since upstream include others [Orabug: 30294515]
- Sync oracle files with upstream and convert xml.in to xml [Orabug: 29855750]
- add ol5 ol6 ol7 os type [Orabug: 27932947]
- osinfo-query command error with OL7U5 [Orabug: 27700001]
- Update OL7U5 osinfo-db to add OL7U5 release support [Orabug: 27700063]
- add ol7.4 os info [Orabug: 27175558]
- Update Oracle Linux OS info [Orabug: 26135475]
- Add Oracle Linux OS info [Orabug: 18501468]
- Pack ol.xml into tarball [Orabug: 20410527]
- Update libosinfo to add all Oracle linux OS release/updates information [Orabug: 26135475]
- Remove old OL support from 0010-add-oracle-extra-osinfo.patch

[20200813-1]
- Update to v20200813 release
- Related: rhbz#1837756 - osinfo-db is out of date
- Resolves: rhbz#1868030 - 'osinfo-query os' is missing latest version of Ubuntu and Oracle Linux

[20200804-2]
- Remove duplicated virtio1.0-fs device
- Related: rhbz#1837756 - osinfo-db is out of date

[20200804-1]
- Update to v20200804 release
- Related: rhbz#1837756 - osinfo-db is out of date

[20200529-1]
- Update to v20200529 release
- Resolves: rhbz#1837756 - osinfo-db is out of date
- Resolves: rhbz#1707119 - Provide information about UEFI support for guests (osinfo-db)

osinfo-db-tools
[1.8.0-1]
- Resolves: rhbz#1842019 - Rebase to the latest upstream release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4758.html" type="self" title="ELBA-2020-4758" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libosinfo" version="1.8.0" release="1.el8" epoch="0" arch="src">
          <filename>libosinfo-1.8.0-1.el8.src.rpm</filename>
          <sum type="sha256">774544bef849cd80d9cbb075e22d28a9b26d3a7f23b8bdadbde03ab77dae267d</sum>
        </package>
        <package name="libvirt-glib" version="3.0.0" release="1.el8" epoch="0" arch="src">
          <filename>libvirt-glib-3.0.0-1.el8.src.rpm</filename>
          <sum type="sha256">449f37d61dd10e2ff753f4edb50b8954b33037992f14f5d8b44308a109b81115</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-24522</id>
    <title> corosync-qdevice booth  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-09 00:00:00"/>
    <updated date="2023-06-09 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>corosync-qdevice
[3.0.1-1]
- Resolves: rhbz#1752386
- Resolves: rhbz#1879351

- New upstream release

booth
[1.0-5.f2d38ce.git]
- Require the Python interpreter directly instead of using the package name
- Related: rhbz#1619153

[1.0-4.f2d38ce.git]
- revert back to using asciidoc instead of asciidoctor for generating man pages
  (rhbz#1603119)
- fix some issues in the shell scripts (rhbz#1602455)

[1.0-3.f2d38ce.git]
- update for another, current snapshot beyond booth-1.0
  (commit f2d38ce), including:
  . support for solely manually managed tickets (9a365f9)
  . use asciidoctor instead of asciidoc for generating man pages (65e6a6b)
- switch to using Python 3 for the tests instead of Python 2
  (behind unversioned 'python' references; rhbz#1590856)

[1.0-2.570876d.git.3]
- Fix python shebangs (#1580601)

[1.0-2.570876d.git.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.0-2.570876d.git.1]
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages

[1.0-3.570876d.git]
- update per the changesets recently accepted by the upstream
  (memory/resource leaks fixes, patches previously attached separately
  that make unit test pass, internal cleanups, etc.)

[1.0-2.eb4256a.git]
- update a subset of out-of-tree patches per
  https://github.com/ClusterLabs/booth/pull/22#issuecomment-216936987
- pre-inclusion cleanups in the spec (apply systemd scriptlet operations
  with booth-arbitrator, avoid overloading file implicitly considered %doc
  as %license)
  Resolves: rhbz#1314865
  Related: rhbz#1333509

[1.0-1.eb4256a.git]
- initial build</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-24522.html" type="self" title="ELBA-2023-24522" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync-qdevice-devel" version="3.0.1" release="1.el8" epoch="0" arch="aarch64">
          <filename>corosync-qdevice-devel-3.0.1-1.el8.aarch64.rpm</filename>
          <sum type="sha256">93a337cd712d4fe482e79dae97d4945f596a78170ccd73d6b74dc0fcddb15618</sum>
        </package>
        <package name="booth-site" version="1.0" release="5.f2d38ce.git.el8" epoch="0" arch="noarch">
          <filename>booth-site-1.0-5.f2d38ce.git.el8.noarch.rpm</filename>
          <sum type="sha256">74e154b5c785b92e489a9e04b4a7bb3ec3070572a07512a24132a89f18ea3dcb</sum>
        </package>
        <package name="corosync-qdevice" version="3.0.1" release="1.el8" epoch="0" arch="src">
          <filename>corosync-qdevice-3.0.1-1.el8.src.rpm</filename>
          <sum type="sha256">88715fc9f0fa8fcacce34b1df9ad80abf0668c25a7a53c1331f87929c17a3d49</sum>
        </package>
        <package name="booth" version="1.0" release="5.f2d38ce.git.el8" epoch="0" arch="aarch64">
          <filename>booth-1.0-5.f2d38ce.git.el8.aarch64.rpm</filename>
          <sum type="sha256">215c1e87e77720bdd86bb5edd52040bf32d380018622a4510feb7aed230a24a9</sum>
        </package>
        <package name="booth" version="1.0" release="5.f2d38ce.git.el8" epoch="0" arch="src">
          <filename>booth-1.0-5.f2d38ce.git.el8.src.rpm</filename>
          <sum type="sha256">aba14e0917ac0fdd0a42dd0c60c1436cc4a4dbf6f1056d77940109706feef36d</sum>
        </package>
        <package name="booth-core" version="1.0" release="5.f2d38ce.git.el8" epoch="0" arch="aarch64">
          <filename>booth-core-1.0-5.f2d38ce.git.el8.aarch64.rpm</filename>
          <sum type="sha256">0cdc7003df7d748af31d02c49a1dd5e8c04506d6320382ac5bbc31c2a6a0e70f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4793</id>
    <title>new packages: gcc-toolset-10-gcc</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[10.2.1-2]
- update from Fedora gcc 10.2.1-2
- emit debug info for C/C++ external function declarations used in the TU
  (PR debug/96383)
- discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
- strip also -flto=auto from optflags

[10.2.1-1.2]
- avoid stack overflow in std::vector (PR libstdc++/94540, #1859670)
- adjust some libstdc++_nonshared.a symbols
- apply gcc10-libgfortran-compat-2.patch

[10.2.1-1.1]
- hide various symbols in libstdc++_nonshared.a

[10.2.1-1]
- GCC 10.2 release
- add symlink to liblto_plugin.so in /usr/lib/bfd-plugins
- disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
  later
- require MPFR Library version 3.1.0 (or later)

[10.1.1-1.1]
- correct instructions for creation of newlib tarball, filter out sun-rpc
  licensed code that is never used during the package build

[10.1.1-1]
- update to GCC 10.1.0 release

[9.2.1-2.2]
- new package</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4793.html" type="self" title="ELBA-2020-4793" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="gcc-toolset-10-gcc" version="10.2.1" release="2.el8" epoch="0" arch="src">
          <filename>gcc-toolset-10-gcc-10.2.1-2.el8.src.rpm</filename>
          <sum type="sha256">1c6d39e2393cde72b50bc188a103a71d61d614f8d4ea38e7e70c3628327f4f47</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-4325</id>
    <title> lasso security and enhancement update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.6.0-12]
- Fix a dead code issue in the signature wrapping patch
- Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                           vulnerability when parsing SAML responses [rhel-8]

[2.6.0-11]
- Bump release to force the package through OSCI as the previous
  build reached CI just in time for an outage
- Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)

[2.6.0-10]
- Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                           vulnerability when parsing SAML responses [rhel-8]

[2.6.0-9]
- Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                           from lasso)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-4325.html" type="self" title="ELSA-2021-4325" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-28091.html" id="CVE-2021-28091" type="cve" title="CVE-2021-28091" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="lasso-devel" version="2.6.0" release="12.el8" epoch="0" arch="aarch64">
          <filename>lasso-devel-2.6.0-12.el8.aarch64.rpm</filename>
          <sum type="sha256">17c6c4f9e483c8521bdf6e072b6fb959f7a430c5ffce6a1b08ccb033a79e96c4</sum>
        </package>
        <package name="lasso" version="2.6.0" release="12.el8" epoch="0" arch="src">
          <filename>lasso-2.6.0-12.el8.src.rpm</filename>
          <sum type="sha256">e3996c35f2a94bfb920a0198aeb7cee33f997ab977bf0302893a267ae5f3000d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-19503</id>
    <title> java-comment-preprocessor  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-03-21 00:00:00"/>
    <updated date="2024-03-21 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[6.1.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[6.1.4-1]
- new upstream release

[6.0.1-9]
- use better upstream tarball name

[6.0.1-9]
- Disable tests and regenerate BRs

[6.0.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[6.0.1-7]
- Add missing BuildRequires to fix FTBFS

[6.0.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[6.0.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[6.0.1-4]
- Add missing BuildRequires to fix FTBFS (BZ#1405633).

[6.0.1-3]
- Deleted unused and dangerous dependencies (review rhbz#1297347)

[6.0.1-2]
- don't require jpackage-utils (review rhbz#1297347)

[6.0.1-1]
- Initial creation of java-comment-preprocessor package</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-19503.html" type="self" title="ELBA-2024-19503" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="java-comment-preprocessor" version="6.1.4" release="2.el8" epoch="0" arch="src">
          <filename>java-comment-preprocessor-6.1.4-2.el8.src.rpm</filename>
          <sum type="sha256">4772dae875cb47b62789aad663a093c8206c21f550cebb6626c1bc2ed685e3bf</sum>
        </package>
        <package name="java-comment-preprocessor" version="6.1.4" release="2.el8" epoch="0" arch="noarch">
          <filename>java-comment-preprocessor-6.1.4-2.el8.noarch.rpm</filename>
          <sum type="sha256">66c2bea8abc95a7e62851c0b86bb7a67114ad2542de35829eff8381886fe21eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-2987</id>
    <title> samba security, bug fix, and enhancement update</title>
    <severity>Low</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-23 00:00:00"/>
    <updated date="2023-05-23 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>  </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-2987.html" type="self" title="ELSA-2023-2987" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-1615.html" id="CVE-2022-1615" type="cve" title="CVE-2022-1615" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="openchange" version="2.3" release="31.0.1.el8" epoch="0" arch="src">
          <filename>openchange-2.3-31.0.1.el8.src.rpm</filename>
          <sum type="sha256">19ec46d84084bac47a24b4bc70ab1f0071815ca2cfdf1d03e281a144d7fd872b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5097</id>
    <title>eclipse:ol8 bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-02-08 00:00:00"/>
    <updated date="2021-02-08 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>apache-commons-compress
[1.20-3]
- Ensure Java 8 level bytecode when built on Java 11

[1.20-2]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

apache-commons-jxpath
[1.3-36]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1.3-35]
- Set javac -source and -target to 1.8.

apiguardian
[1.1.0-4]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

batik
[1.11-6]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1.11-4]
- build with --xmvn-javadoc

eclipse
[1:4.16-7.0.1]
- Enabled aarch64 build.

[1:4.16-8]
- Add java-11-openjdk-devel - without it /usr/lib/jvm/java-11 is not created.

[1:4.16-7]
- Add additonal Java 11 dependencies to ensure all parts are installed.

[1:4.16-6]
- Require Java 11 explicitly
- Drop hotspot exclusions from the JDK 6 era

[1:4.16-5]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1:4.16-4]
- Update linux-build snapshot and fix adding junit classpath containers to java
  projects

[1:4.16-3]
- Make a bit more portable and fix bootstrap mode

[1:4.16-2]
- Non-bootstrap build

[1:4.16-1]
- Update to latest upstream release

eclipse-ecf
[3.14.8-1.0.1]
- Enabled aarch64 build.

[3.14.8-1]
- Update to latest upstream release
- License switch to EPL 2

eclipse-emf
[1:2.22.0-1.0.1]
- Enabled aarch64 build.

[1:2.22.0-1]
- Update to latest upstream release

felix-gogo-command
[1.0.2-11]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

felix-gogo-runtime
[1.1.0-7]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1.1.0-6]
- Set source/target to 1.8 for Java 11 build.
- Disable Java API link detection for javadoc generation as this fails.
- Disable some assertions in TestParser.testPipe() that fail on Java 11.

felix-gogo-shell
[1.1.0-5]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

felix-scr
[2.1.16-6]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[2.1.16-5]
- Build javadoc with --xmvn-javadoc

glassfish-annotation-api
glassfish-el
[3.0.1-0.14.b08]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[3.0.1-0.13.b08]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[3.0.1-0.12.b08]
- Specify CDDL version on subpackages

[3.0.1-0.11.b08]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[3.0.1-0.10.b08]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[3.0.1-0.9.b08]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.0.1-0.8.b08]
- Fix license tag of javadoc package

[3.0.1-0.7.b08]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0.1-0.6.b08]
- Specify CDDL license version

[3.0.1-0.5.b08]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0.1-0.4.b08]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.1-0.3.b08]
- Rebuild

[3.0.1-0.2.b08]
- use default bundle plugin settings

[3.0.1-0.1.b08]
- update to 3.0.1-b08

[3.0.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.0.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[3.0.0-4]
- Fix build-requires on jvnet-parent

[3.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[3.0.0-2]
- Use Requires: java-headless rebuild (#1067528)

[3.0.0-1]
- Update to upstream version 3.0.0

[2.2.5-5]
- Move xmvn customizations to prep.

[2.2.5-4]
- switch to XMvn, fix for rhbz#992384
- install license file

[2.2.5-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[2.2.5-2]
- Add depmap for org.eclipse.jetty.orbit
- Resolves: rhbz#918514

[2.2.5-1]
- Initial version of package

glassfish-jsp
[2.3.4-6]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[2.3.4-5]
- Avoid javadoc problems restricting build to Java 8

[2.3.4-4]
- Set to use Java 1.8 as package needs javax.servlet

glassfish-jsp-api
[2.3.3-3]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

glassfish-servlet-api
[3.1.0-19]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

google-gson
[2.8.6-5]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[2.8.6-4]
- fixed javadoc to build on jdk11

hamcrest
[0:1.3-29]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

icu4j
jetty
[9.4.30-2.v20200611]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[9.4.30-1.v20200611]
- Update to latest upstream release

jsch
[0.1.54-12]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

junit
[1:4.12-14]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

junit5
[5.6.2-2]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[5.6.2-1]
- Update to version 5.6.2.

jzlib
[0:1.1.3-14]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[0:1.1.3-13]
- Fix build with Java 11.

lucene
[0:8.4.1-5]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

objectweb-asm
[7.3.1-3]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

opentest4j
[1.2.0-2]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

sat4j
[2.3.5-19]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[2.3.5-18]
- Allow building on Java 11

univocity-parsers
[2.8.4-3]
- Allow building without tests

[2.8.4-2]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[2.8.4-1]
- Update to version 2.8.4.

[2.8.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[2.8.3-1]
- Update to version 2.8.3.

xml-commons-apis
[1.4.01-31]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1.4.01-30]
- Allow building against Java 11

[1.4.01-29]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.4.01-28]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.4.01-27]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.4.01-26]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

xmlgraphics-commons
[0:2.3-4]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

xz-java
[1.8-8]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1.8-7]
- Allow building against Java 11</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5097.html" type="self" title="ELBA-2020-5097" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="glassfish-jsp" version="2.3.4" release="6.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>glassfish-jsp-2.3.4-6.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">13d585aa6816661d467f74e8d26d7444ec4c575c228811fc9bb96e6db3111d89</sum>
        </package>
        <package name="apiguardian" version="1.1.0" release="4.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>apiguardian-1.1.0-4.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">59774d77b074124a2e1b22d715bb71b006badcfecf972bf09be9edbda94de7da</sum>
        </package>
        <package name="felix-scr" version="2.1.16" release="6.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>felix-scr-2.1.16-6.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">9f11f65895d58e7be86394f6b23f519630a54cab76416290628950395ce67c2c</sum>
        </package>
        <package name="lucene" version="8.4.1" release="5.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>lucene-8.4.1-5.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">9a5771e3dd11f88bcd97569b6adeff62e6eecf8b3134395987356de1dc0d1732</sum>
        </package>
        <package name="google-gson" version="2.8.6" release="5.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>google-gson-2.8.6-5.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">ce3a41d0873d775604f19fd98188250141a1e9d4e3968ef2d5ed0bffc660a370</sum>
        </package>
        <package name="felix-gogo-command" version="1.0.2" release="11.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>felix-gogo-command-1.0.2-11.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">4d1105ee946d8db1205d2bfeecfe7b37225164bba934edb7c7e6250dae5267a0</sum>
        </package>
        <package name="junit5" version="5.6.2" release="2.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>junit5-5.6.2-2.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">10006a7ca5723fe1b06b915874f6eb89e57a035324d60a0b3cfebcb2a7aa9e9f</sum>
        </package>
        <package name="felix-gogo-shell" version="1.1.0" release="5.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>felix-gogo-shell-1.1.0-5.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">5da50e84f5228a39c26d71c7ac282da2228fe78562428f74e5c75e404a9c850b</sum>
        </package>
        <package name="icu4j" version="65.1" release="3.module+el8.3.0+9630+fe6f9367" epoch="1" arch="src">
          <filename>icu4j-65.1-3.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">fb7b81d2dac2a29ff9c97177ec733364ff2e5f2d400222d8f8b0798898c69577</sum>
        </package>
        <package name="xmlgraphics-commons" version="2.3" release="4.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>xmlgraphics-commons-2.3-4.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">c075fe62695d9326a6c643a93a96001e033ec91d401604531a7b120df9832202</sum>
        </package>
        <package name="felix-gogo-runtime" version="1.1.0" release="7.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>felix-gogo-runtime-1.1.0-7.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">698f1f112f8d8027f2b7c7f5b31eede0dfe961be6c87e1293d9dc18213aa4a83</sum>
        </package>
        <package name="opentest4j" version="1.2.0" release="2.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>opentest4j-1.2.0-2.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">cc7b0f54c0adf61dfee377f937f86c2c0f2b8dc8463b6b2f57f1d17941a67e36</sum>
        </package>
        <package name="batik" version="1.11" release="6.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>batik-1.11-6.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">67ed0aa2509284ddfae7458868eabc11b5f07533d92d3ec4dd2437b6a629ea2b</sum>
        </package>
        <package name="univocity-parsers" version="2.8.4" release="3.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>univocity-parsers-2.8.4-3.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">97ee87ff09d53a04c3bfa4b853fe9154055bb4e6cec3cacf5a2d9b2707ba9816</sum>
        </package>
        <package name="jetty" version="9.4.30" release="2.v20200611.module+el8.3.0+9630+fe6f9367" epoch="0" arch="src">
          <filename>jetty-9.4.30-2.v20200611.module+el8.3.0+9630+fe6f9367.src.rpm</filename>
          <sum type="sha256">200101e971ee7e9c5de23a24a964f0591780c8a661eb4d4c10064722ac33223a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2019-3614</id>
    <title>dbus-python bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2019-11-14 00:00:00"/>
    <updated date="2019-11-14 00:00:00"/>
    <rights>Copyright 2019 Oracle, Inc.</rights>
    <description>[1.2.4-15]
- Backport patch from Neal Gompa &lt;ngompa13@gmail.com&gt; to generate pythonXdist
  metadata</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2019-3614.html" type="self" title="ELBA-2019-3614" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="dbus-python" version="1.2.4" release="15.el8" epoch="0" arch="src">
          <filename>dbus-python-1.2.4-15.el8.src.rpm</filename>
          <sum type="sha256">cb20888e8718f5c8626bb9a35870ebf4aaeda5ca58ff4b397e02373fda31c19f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-1994</id>
    <title>libqmi bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-17 00:00:00"/>
    <updated date="2022-05-17 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.30.2-1]
- Upgrade to 1.30.2</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-1994.html" type="self" title="ELBA-2022-1994" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libqmi" version="1.30.2" release="1.el8" epoch="0" arch="src">
          <filename>libqmi-1.30.2-1.el8.src.rpm</filename>
          <sum type="sha256">3375a1d02fee60afa28189f9149a80af3b1982270122c75efcda30e023c2b235</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1652</id>
    <title>libldb bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.2.0-2]
* resolves: rhbz#1941515 - Fixed CVE-2021-20277

[2.2.0-1]
- Resolves: rhbz#1878114 - Rebase libldb to the version required by Samba
- Resolves: rhbz#1794349 - Build libldb with lmdb support
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1652.html" type="self" title="ELBA-2021-1652" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libldb" version="2.2.0" release="2.el8" epoch="0" arch="src">
          <filename>libldb-2.2.0-2.el8.src.rpm</filename>
          <sum type="sha256">55d5ebd53fb94e89c5016034c79b34db2382460aa6915c32ce1d07aac4264ed2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-1997</id>
    <title>libmbim bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-05-17 00:00:00"/>
    <updated date="2022-05-17 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.26.0-2]
- Add Conflicts tag because the bash-completion scripts moved
  from the main package to the utils sub package causing a file
  conflict on multilib systems between the old 32 bit main
  package and the new 64 bit utils sub package.

[1.26.0-1]
- Upgrade to 1.26.0 release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-1997.html" type="self" title="ELBA-2022-1997" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libmbim" version="1.26.0" release="2.el8" epoch="0" arch="src">
          <filename>libmbim-1.26.0-2.el8.src.rpm</filename>
          <sum type="sha256">bc66d29dd3ad94a7578e740d55b7e87f54224453ec4bfbe6b65c699c853d9778</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9559</id>
    <title> corosync  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-19 00:00:00"/>
    <updated date="2021-11-19 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[3.1.5-1]
- Related: rhbz#1948973

- New upstream release (rhbz#1948973)

[3.1.4-1]
- Related: rhbz#1948973
- Resolves: rhbz#1962139

- New upstream release (rhbz#1948973)
- stats: fix crash when iterating over deleted keys (rhbz#1962139)

[3.1.3-1]
- Resolves: rhbz#1948973

- New upstream release (rhbz#1948973)

[3.1.0-5]
- Resolves: rhbz#1954432

[3.1.0-4]
- Resolves: rhbz#1946623

- knet: pass correct handle to knet_handle_compress (rhbz#1946623)
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9559.html" type="self" title="ELBA-2021-9559" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync" version="3.1.5" release="1.el8" epoch="0" arch="src">
          <filename>corosync-3.1.5-1.el8.src.rpm</filename>
          <sum type="sha256">6df14d188be4588375bd64a44d81a3b8cefb2218e3f3933eb0f02f48a729c22b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4810</id>
    <title>plymouth bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.9.4-7.20200615git1e36e30.0.1]
- Changed description in specfile

[0.9.4-7.git1688935]
- Fix scriptlets to make sure 'bgrt' gets set by default
  Related: #1880509

[0.9.4-6.git1688935]
- Add Recommends to pull in plymouth-theme-spinner
  Resolves: #1880509

[0.9.4-5.git1688935]
- Fix typo in poweroff path
  Resolves: #1871817
  Related: #1626342

[0.9.4-4.git1688935]
- Fix one last bit of flicker in the shutdown path
  Related: #1626342

[0.9.4-3.git1688935]
- Die at shutdown with everything else
  Resolves: #1626342

[0.9.4-1.git1688935]
- Rebase to git snapshot
  Resolves: #1688935</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4810.html" type="self" title="ELBA-2020-4810" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="plymouth" version="0.9.4" release="7.20200615git1e36e30.0.1.el8" epoch="0" arch="src">
          <filename>plymouth-0.9.4-7.20200615git1e36e30.0.1.el8.src.rpm</filename>
          <sum type="sha256">d4cf9522f49c1f484ebf3ce67a0e5008dd74076b4b9f67fdf57a23b7fd43a2df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-3017</id>
    <title> edk2 security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-23 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[20220126gitbb1bba3d77-13]
- edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
- edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
- Resolves: RHEL-21158
  (CVE-2022-36765 edk2: integer overflow in CreateHob() could lead to HOB OOB R/W [rhel-8])

[20220126gitbb1bba3d77-12]
- edk2-Apply-uncrustify-changes-to-.c-.h-files-in-the-Netwo.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-Apply-uncrustify-changes.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-Apply-uncrustify-changes-p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
- Resolves: RHEL-21840
  (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
- Resolves: RHEL-21844
  (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-8])
- Resolves: RHEL-21846
  (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-8])
- Resolves: RHEL-21848
  (CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-8])
- Resolves: RHEL-21850
  (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-8])
- Resolves: RHEL-21852
  (CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-8])

[20220126gitbb1bba3d77-11]
- edk2-SecurityPkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-Change-OPTIONAL-keyword-usage-style.patch [RHEL-21154 RHEL-21156]
- edk2-MdePkg-Introduce-CcMeasurementProtocol-for-CC-Guest-.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpm2.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpmM.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-418.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-DxeTpm2MeasureBootLib-SEC-PATCH-4118-2.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-DxeTpmMeasureBootLib-SEC-PATCH-4117-2.patch [RHEL-21154 RHEL-21156]
- edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21154 RHEL-21156]
- edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21840 RHEL-21842]
- edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21840 RHEL-21842]
- edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21840 RHEL-21842]
- edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21840 RHEL-21842]
- Resolves: RHEL-21154
  (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-8])
- Resolves: RHEL-21156
  (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-8])
- Resolves: RHEL-21840
  (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
- Resolves: RHEL-21842
  (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-8])

[20220126gitbb1bba3d77-10]
- edk2-OvmfPkg-VirtNorFlashDxe-clone-ArmPlatformPkg-s-NOR-f.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-remove-CheckBlockLocked-feat.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-remove-disk-I-O-protocol-imp.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-drop-block-I-O-protocol-impl.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-avoid-array-mode-switch-afte.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-avoid-switching-between-mode.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-use-EFI_MEMORY_WC-and-drop-A.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariable2.patch [RHEL-17587]
-  edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variable2.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-17587]
- edk2-ArmVirtPkg-ArmVirtQemu-migrate-to-OVMF-s-VirtNorFlas.patch [RHEL-17587]
- edk2-OvmfPkg-clone-NorFlashPlatformLib-into-VirtNorFlashP.patch [RHEL-17587]
- Resolves: RHEL-17587
  ([rhel8] guest fails to boot due to ASSERT error)

[20220126gitbb1bba3d77-9]
- edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-17587]
- edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-17587]
- Resolves: RHEL-17587
  ([rhel8] guest fails to boot due to ASSERT error)

[20220126gitbb1bba3d77-8]
- edk2-Bumped-openssl-submodule-version-to-cf317b2bb227.patch [RHEL-7560]
- Resolves: RHEL-7560
  (CVE-2023-3446 edk2: openssl: Excessive time spent checking DH keys and parameters [rhel-8])

[20220126gitbb1bba3d77-7]
- edk2-add-8.6-machine-type-to-edk2-ovmf-cc.json.patch [RHEL-12626]
- Resolves: RHEL-12626
  (Missing firmware descriptor with secureboot disabled in RHEL 8)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-3017.html" type="self" title="ELSA-2024-3017" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36763.html" id="CVE-2022-36763" type="cve" title="CVE-2022-36763" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36764.html" id="CVE-2022-36764" type="cve" title="CVE-2022-36764" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36765.html" id="CVE-2022-36765" type="cve" title="CVE-2022-36765" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45229.html" id="CVE-2023-45229" type="cve" title="CVE-2023-45229" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45231.html" id="CVE-2023-45231" type="cve" title="CVE-2023-45231" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45232.html" id="CVE-2023-45232" type="cve" title="CVE-2023-45232" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45233.html" id="CVE-2023-45233" type="cve" title="CVE-2023-45233" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45235.html" id="CVE-2023-45235" type="cve" title="CVE-2023-45235" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20220126gitbb1bba3d77" release="13.el8_10" epoch="0" arch="src">
          <filename>edk2-20220126gitbb1bba3d77-13.el8_10.src.rpm</filename>
          <sum type="sha256">f00bdba82229aa9d7b22fa28bb1d0dbe144ba9fd08b8c99fd8493b00045080b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-4814</id>
    <title>flatpak bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.6.2-4]
- OCI: extract appstream data for runtimes (#1878231)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-4814.html" type="self" title="ELBA-2020-4814" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="flatpak" version="1.6.2" release="4.el8" epoch="0" arch="src">
          <filename>flatpak-1.6.2-4.el8.src.rpm</filename>
          <sum type="sha256">7d88a8650a5c3786f687e8986c6deb5b77ddff5fb178d0e4be87dbec7bc8d071</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2019-3636</id>
    <title>dlm bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2019-11-14 00:00:00"/>
    <updated date="2019-11-14 00:00:00"/>
    <rights>Copyright 2019 Oracle, Inc.</rights>
    <description>[4.0.9-3]
- kick gating system

[4.0.9-2]
- try to kick gating system

[4.0.9-1]
- update to 4.0.9</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2019-3636.html" type="self" title="ELBA-2019-3636" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="dlm" version="4.0.9" release="3.el8" epoch="0" arch="src">
          <filename>dlm-4.0.9-3.el8.src.rpm</filename>
          <sum type="sha256">b56b4f35a52d33b59d6c0ecefd45400befdc96f6cee3f36a4a82e45b1b3a6630</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1672</id>
    <title>libsemanage bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.9-6]
- sync filesystem with sandbox (#1913224)

[2.9-5]
- Revert 'genhomedircon: check usepasswd' (rhbz#1871786)
- semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
- semanage.conf - expand list of ignoredirs (rhbz#1871786)

[2.9-4]
- genhomedircon: check usepasswd (rhbz#1871786)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1672.html" type="self" title="ELBA-2021-1672" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libsemanage" version="2.9" release="6.el8" epoch="0" arch="src">
          <filename>libsemanage-2.9-6.el8.src.rpm</filename>
          <sum type="sha256">3401b9c0da0ae5df3a3b9b2ad22136379d22f9c625825858519157c90148ba5b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4897</id>
    <title>kronosnet bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-12-03 00:00:00"/>
    <updated date="2021-12-03 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.18-4]
Revert defrag buffer change
  Resolves: rhbz#2023847

[1.18-3]
Rebuild to, hopefully, fix tag error
  Resolves: rhbz#2008196

[1.18-3]
Calculate defrag buffers correctly
  Resolves: rhbz#2008196
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4897.html" type="self" title="ELBA-2021-4897" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="kronosnet" version="1.18" release="4.el8_5" epoch="0" arch="src">
          <filename>kronosnet-1.18-4.el8_5.src.rpm</filename>
          <sum type="sha256">bf2665bfe5d81eee6338d1240c833423eae3ca3ab8cc76d446f9572866c224cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-42076</id>
    <title> docbook2X  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-11-25 00:00:00"/>
    <updated date="2025-11-25 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[0.8.8-31]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.8.8-30]
- Perl 5.28 rebuild

[0.8.8-29]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.8.8-28]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[0.8.8-27]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0.8.8-26]
- Perl 5.26 rebuild

[0.8.8-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.8.8-24]
- Perl 5.24 rebuild

[0.8.8-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.8.8-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-42076.html" type="self" title="ELBA-2025-42076" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="docbook2X" version="0.8.8" release="31.el8" epoch="0" arch="src">
          <filename>docbook2X-0.8.8-31.el8.src.rpm</filename>
          <sum type="sha256">a4546672433554e7c9f319312983fefb84874fb974b6d162905778db08502cca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2019-3653</id>
    <title>libuser bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2019-11-14 00:00:00"/>
    <updated date="2019-11-14 00:00:00"/>
    <rights>Copyright 2019 Oracle, Inc.</rights>
    <description>[0.62-23]
- Actually apply the patch from the previous build
- Resolves: rhbz#1670997 - Amend the user lifecycle auditing

[0.62-22]
- Resolves: rhbz#1670997 - Amend the user lifecycle auditing</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2019-3653.html" type="self" title="ELBA-2019-3653" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libuser" version="0.62" release="23.el8" epoch="0" arch="src">
          <filename>libuser-0.62-23.el8.src.rpm</filename>
          <sum type="sha256">4080727df88f749354276302db81aa3a9941663f5c6f3b4195895cbdd9f525fb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-4456</id>
    <title>rdma-core bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>fabtests
[1.10.0]
- Rebase to upstream release v1.10.0
- Resolves: bz1770651

libfabric
[1.10.0-1]
- Rebase to upstream release v1.10.0
- Resolves: bz1739283

libpsm2
[11.2.91-1]
- Rebase to latest upstream release 11.2.91
- Resolves: bz1739284

libvma
[9.0.2-1]
- Update to upstream v9.0.2 release
- Resolves: rhbz#1789385

mpitests
[5.6.2-1]
- Update OSU benchmarks to upstream release 5.6.2
- Update IMB benchmarks to upstream release v2019.6
- Resolves: rhbz#1817837

mstflint
[4.14.0-1]
- Rebase to latest upstream release v4.14.0-1
- Resolves: bz1789386

mvapich2
[2.3.3-1]
- Update to upstream stable point release v2.3.3
- Fix floating point exception for non-NUMA machine
- Resolves: rhbz#1815962, rhbz#1814296

opa-ff
[10.10.1.0.35-1.0.1]
- Add oracle-linux.patch
- Add modify_to_suitable_os_release.patch
- Added patch to properly identify oracle as redhat (Alex Burmashev)

[10.10.1.0.35-1]
- Rebase to latest upstream release v10.10.1.0.35
- Resolves: bz1739280

opa-fm
[10.10.1.0.35-1.0.1]
- Support os_vendor checking for OL
- Add modify_to_suitable_os_release.patch
- Added patch to identify OL as redhat vendor (Alex Burmashev)

[10.10.1.0.35-1]
- Rebase to upstream release 10.10.1.0.35
- Resolves:bz1739281

openmpi
[4.0.3-3]
- Fix module load overwrites system MANPATH
- Resolves: rhbz#1858519

[4.0.3-1]
- Update to upstream v4.0.3 release
- Resolves: rhbz#1817834

opensm
[3.3.23-1]
- Rebase to latest upstream release 3.3.23
- Resolves: bz1815960

perftest
[4.4-3]
- Fix segment fault with large QP numbers
- Resolves: rhbz#1859358

[4.4-2]
- Update to upstream 4.4-0.29.g817ec38 tarball
- Resolves: rhbz#1832709

[4.4-1]
- Update to upstream 4.4-0.23.g89e176a tarball
- Resolves: rhbz#1817830

rdma-core
[29.0-3]
- BuildRequires perl-generators
- Backport upstream stable-v29 commits
- Resolves: bz1845420

[29.0-2]
- Suppress ibdev2netdev warning messgae
- Unversioned documentation directory
- Resolves: bz1794904, bz1824853

[29.0-1]
- Update to upstream v29 release for features and fixes
- Resolves: bz1790624

ucx
[1.8.0-1]
- Bump version to 1.8.0

[1.7.0-1]
- Bump version to 1.7.0

[1.6.0-1]
- Add cma, knem, and xpmem sub-packages

[1.6.0-1]
- Bump version to 1.6.0

[1.5.0-1]
- Bump version to 1.5.0
- See NEWS for details

[1.4.0-1]
- See NEWS for details

[1.3.1-1]
- See NEWS for details

[1.3.0-1]
- Explicitly set gcc-c++ as requirements

[1.3.0-1]
- See NEWS for details

[1.2.1-1]
- Spec file now complies with Fedora guidelines

[1.2.0-1]
- Fedora package created</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-4456.html" type="self" title="ELEA-2020-4456" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="mvapich2" version="2.3.3" release="1.el8" epoch="0" arch="src">
          <filename>mvapich2-2.3.3-1.el8.src.rpm</filename>
          <sum type="sha256">672db1743e598f16fff3ab74424c7607e748caefa4ba4a7cd6961706140f8802</sum>
        </package>
        <package name="ucx" version="1.8.0" release="1.el8" epoch="0" arch="src">
          <filename>ucx-1.8.0-1.el8.src.rpm</filename>
          <sum type="sha256">d5d9596e700e75dab5bf26c053b65912863b4b14109acbea5a96232a42c5685c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9055</id>
    <title>libreport  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-01-25 00:00:00"/>
    <updated date="2022-01-25 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.9.5-15.0.3]
- Fix URL link, the web page does not exist anymore [OLDIS-13596]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9055.html" type="self" title="ELBA-2022-9055" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libreport" version="2.9.5" release="15.0.3.el8" epoch="0" arch="src">
          <filename>libreport-2.9.5-15.0.3.el8.src.rpm</filename>
          <sum type="sha256">b67dee3f2c7e6bd52660e708b3821c9287bc7d67e6b72ef985a66394c86b95a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-3097</id>
    <title> gssntlmssp security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-24 00:00:00"/>
    <updated date="2023-05-24 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[1.2.0-1]
- New release 1.2.0
- Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields
- Fix CVE-2023-25564: memory corruption when decoding UTF16 strings
- Fix CVE-2023-25565: incorrect free when decoding target information
- Fix CVE-2023-25566: memory leak when parsing usernames
- Fix CVE-2023-25567: out-of-bounds read when decoding target information
- Resolves: rhbz#2181313</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-3097.html" type="self" title="ELSA-2023-3097" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-25563.html" id="CVE-2023-25563" type="cve" title="CVE-2023-25563" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-25564.html" id="CVE-2023-25564" type="cve" title="CVE-2023-25564" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-25565.html" id="CVE-2023-25565" type="cve" title="CVE-2023-25565" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-25566.html" id="CVE-2023-25566" type="cve" title="CVE-2023-25566" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-25567.html" id="CVE-2023-25567" type="cve" title="CVE-2023-25567" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="gssntlmssp" version="1.2.0" release="1.el8_8" epoch="0" arch="src">
          <filename>gssntlmssp-1.2.0-1.el8_8.src.rpm</filename>
          <sum type="sha256">b418a6c6c02a855754a6567d641678a10039022add69d30409fe6fc8d9a5432c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2023-6970</id>
    <title>pacemaker bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-17 00:00:00"/>
    <updated date="2023-11-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.1.6-8.0.1]
- Upstream reference in pacemaker crm_report binary [Orabug: 32825154]
- Replace bug url [Orabug: 34202300]

[2.1.6-8]
- Fix an additional shutdown race between attrd and the controller
- Related: rhbz2228955

[2.1.6-7]
- Fix attrd race condition when shutting down
- Resolves: rhbz2228955

[2.1.6-6]
- Wait for a reply from various controller commands
- Resolves: rhbz2225631
- Related: rhbz2189300

[2.1.6-5]
- Apply dampening when creating attributes with attrd_updater -U
- Resolves: rhbz2224046
- Related: rhbz2189300

[2.1.6-4]
- Clone instances should not shuffle unnecessarily
- Fix a bug in clone resource description display
- Resolves: rhbz1931023
- Resolves: rhbz1688149
- Related: rhbz2106642
- Related: rhbz2189300

[2.1.6-3]
- Fix moving groups when there's a constraint for a single group member
- Resolves: rhbz2218232
- Resolves: rhbz2189300

[2.1.6-2]
- Support start state for Pacemaker Remote nodes
- Resolves: rhbz1502795

[2.1.6-1]
- Rebase pacemaker on upstream 2.1.6 final release
- Resolves: rhbz1578820
- Resolves: rhbz1632951
- Resolves: rhbz1876173
- Resolves: rhbz2010084
- Resolves: rhbz2030869
- Resolves: rhbz2078611
- Resolves: rhbz2106642
- Resolves: rhbz2160206
- Resolves: rhbz2168633

[2.1.5-8]
- Rebuild with new release due to build system problems
- Related: rhbz2168249
- Related: rhbz2168675

[2.1.5-7]
- Additional fixes for SIGABRT during pacemaker-fenced shutdown
- Backport fix for attrd_updater -QA not displaying all nodes
- Related: rhbz2168249
- Resolves: rhbz2168675

[2.1.5-6]
- Backport fix for migration history cleanup causing resource recovery
- Backport fix for SIGABRT during pacemaker-fenced shutdown
- Resolves: rhbz2166388
- Resolves: rhbz2168249

[2.1.5-5]
- Backport fix for remote node shutdown regression
- Resolves: rhbz2163567

[2.1.5-4]
- Rebase pacemaker on upstream 2.1.5 final release
- Add support for sync points to attribute daemon
- Resolves: rhbz1463033
- Resolves: rhbz1866578
- Resolves: rhbz2122352

[2.1.5-3]
- Fix errors found by covscan
- Related: rhbz2122352

[2.1.5-2]
- Rebase on upstream 2.1.5-rc3 release
- Resolves: rhbz1626546
- Related: rhbz2122352

[2.1.5-1]
- Rebase on upstream 2.1.5-rc2 release
- Resolves: rhbz1822125
- Resolves: rhbz2095662
- Resolves: rhbz2121852
- Resolves: rhbz2122806
- Resolves: rhbz2133497
- Resolves: rhbz2142681

[2.1.4-5]
- Fix regression in crm_resource -O
- Resolves: rhbz2118337

[2.1.4-4]
- Ensure all nodes are re-unfenced after device configuration change
- crm_resource --why now checks node health status
- Resolves: rhbz1872483
- Resolves: rhbz2065818

[2.1.4-3]
- Add support for ACL groups
- Resolves: rhbz1724310

[2.1.4-2]
- Restore crm_attribute query behavior when attribute does not exist
- Resolves: rhbz2072107

[2.1.4-1]
- Fencer should not ignore CIB updates when stonith is disabled
- Rebase pacemaker on upstream 2.1.4 final release
- Fix typo in ocf:pacemaker:HealthSMART meta-data
- Resolves: rhbz2055935
- Resolves: rhbz2072107
- Resolves: rhbz2094855

[2.1.3-2]
- crm_attribute works on remote node command line when hostname differs
- Rebase pacemaker on upstream 2.1.3 final release
- Resolves: rhbz1384172
- Resolves: rhbz2072107

[2.1.3-1]
- crm_resource --restart fails to restart clone instances except instance 0
- Add new multiple-active option for 'stop unexpected instances'
- Unable to show metadata for 'service' agents with '@' and '.' in the name
- Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
- Allow resource meta-attribute to exempt resource from node health restrictions
- Show node health states in crm_mon
- Rebase pacemaker on upstream 2.1.3-rc2 release
- crm_mon API result does not validate against schema if fence event has exit-reason
- Resolves: rhbz1930578
- Resolves: rhbz2036815
- Resolves: rhbz2045096
- Resolves: rhbz2049722
- Resolves: rhbz2059638
- Resolves: rhbz2065812
- Resolves: rhbz2072107
- Resolves: rhbz2086230

[2.1.2-4]
- Fix regression in down event detection that affects remote nodes
- Resolves: rhbz2046446

[2.1.2-3]
- Improve display of failed actions
- Handle certain probe failures as stopped instead of failed
- Update pcmk_delay_base description in option meta-data
- Avoid crash when using clone notifications
- Retry Corosync shutdown tracking if first attempt fails
- Resolves: rhbz1470834
- Resolves: rhbz1506372
- Resolves: rhbz2027370
- Resolves: rhbz2039675
- Resolves: rhbz2042550

[2.1.2-2]
- Correctly get metadata for systemd agent names that end in '@'
- Use correct OCF 1.1 syntax in ocf:pacemaker:Stateful meta-data
- Fix regression in displayed times in crm_mon's fence history
- Resolves: rhbz2003151
- Resolves: rhbz2027370
- Resolves: rhbz2032027

[2.1.2-1]
- Allow per-host fence delays for a single fence device
- Use OCF 1.1 enum type in cluster option metadata for better validation
- crm-resource --force-* now works with LSB resources
- Allow spaces in pcmk_host_map
- ACL group names are no longer restricted to a unique XML id
- Rebase on upstream 2.1.2
- Ensure upgrades get compatible Corosync libraries
- Resolves: rhbz1082146
- Resolves: rhbz1281463
- Resolves: rhbz1346014
- Resolves: rhbz1376538
- Resolves: rhbz1384420
- Resolves: rhbz2011973
- Resolves: rhbz2027006

[2.1.0-8]
- Fix XML issue in fence_watchdog meta-data
- Resolves: rhbz1443666

[2.1.0-7]
- Fix minor issue with crm_resource error message change
- Resolves: rhbz1447918

[2.1.0-6]
- Fix watchdog agent version information
- Ensure transient attributes are cleared when multiple nodes are lost
- Resolves: rhbz1443666
- Resolves: rhbz1986998

[2.1.0-5]
- Allow configuring specific nodes to use watchdog-only sbd for fencing
- Resolves: rhbz1443666

[2.1.0-4]
- Show better error messages in crm_resource with invalid resource types
- Avoid selecting wrong device when dynamic-list fencing is used with host map
- Do not schedule probes of unmanaged resources on pending nodes
- Fix argument handling regressions in crm_attribute and wrappers
- Resolves: rhbz1447918
- Resolves: rhbz1978010
- Resolves: rhbz1982453
- Resolves: rhbz1984120

[2.1.0-3]
- crm_resource now supports XML output from resource agent actions
- Correct output for crm_simulate --show-failcounts
- Avoid remote node unfencing loop
- Resolves: rhbz1644628
- Resolves: rhbz1686426
- Resolves: rhbz1961857

[2.1.0-2]
- Rebase on upstream 2.1.0 final release
- Correct schema for crm_resource XML output
- Resolves: rhbz1935464
- Resolves: rhbz1967087

[2.1.0-1]
- Add crm_simulate --show-attrs and --show-failcounts options
- Retry getting fence agent meta-data after initial failure
- Add debug option for more verbose ocf:pacemaker:ping logs
- Rebase on upstream 2.1.0-rc2 release
- Support OCF Resource Agent API 1.1 standard
- Fix crm_mon regression that could cause certain agents to fail at shutdown
- Allow setting OCF check level for crm_resource --validate and --force-check
- Resolves: rhbz1686426
- Resolves: rhbz1797579
- Resolves: rhbz1843177
- Resolves: rhbz1935464
- Resolves: rhbz1936696
- Resolves: rhbz1948620
- Resolves: rhbz1955792

[2.0.5-8]
- Route cancellations through correct node when remote connection is moving
- Resolves: rhbz1928762

[2.0.5-7]
- Do not introduce regression in crm_resource --locate
- Resolves: rhbz1925681

[2.0.5-6]
- crm_mon --daemonize should reconnect if cluster restarts
- crm_mon should show more informative messages when cluster is starting
- crm_mon should show rest of status if fencing history is unavailable
- cibsecret now works on remote nodes (as long as name can be reached via ssh)
- Stop remote nodes correctly when connection history is later than node history
- Resolves: rhbz1466875
- Resolves: rhbz1872490
- Resolves: rhbz1880426
- Resolves: rhbz1881537
- Resolves: rhbz1898457

[2.0.5-5]
- Allow non-critical resources that stop rather than make another resource move
- Support crm_resource --digests option for showing operation digests
- Clean-up of all resources should work from remote nodes
- Resolves: rhbz1371576
- Resolves: rhbz1872376
- Resolves: rhbz1907726

[2.0.5-4]
- Rebase on upstream 2.0.5 release
- Make waiting to be pinged by sbd via pacemakerd-api the default
- Resolves: rhbz1885645
- Resolves: rhbz1873138

[2.0.5-3]
- Rebase on upstream 2.0.5-rc3 release
- Resolves: rhbz1885645

[2.0.5-2]
- Rebase on upstream 2.0.5-rc2 release
- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz1885645
- Resolves: rhbz1889582

[2.0.5-1]
- crm_mon --resource option to filter output by resource
- Avoid filling /dev/shm after frequent corosync errors
- Allow configurable permissions for log files
- Ensure ACL write permission always supersedes read
- Use fence device monitor timeout for starts and probes
- Allow type='integer' in rule expressions
- Avoid error messages when running crm_node inside bundles
- Avoid situation where promotion is not scheduled until next transition
- crm_mon should show more clearly when an entire group is disabled
- Rebase on upstream 2.0.5-rc1 release
- Resolves: rhbz1300597
- Resolves: rhbz1614166
- Resolves: rhbz1647136
- Resolves: rhbz1833173
- Resolves: rhbz1856015
- Resolves: rhbz1866573
- Resolves: rhbz1874391
- Resolves: rhbz1835717
- Resolves: rhbz1748139
- Resolves: rhbz1885645

[2.0.4-6]
- Fix cibsecret bug when node name is different from hostname
- Resolves: rhbz1870873

[2.0.4-5]
- Synchronize start-up and shutdown with SBD
- Resolves: rhbz1718324

[2.0.4-4]
- Allow crm_node -l/-p options to work from Pacemaker Remote nodes
- Correct action timeout value listed in log message
- Fix regression in crm_mon --daemonize with HTML output
- Resolves: rhbz1796824
- Resolves: rhbz1856035
- Resolves: rhbz1857728

[2.0.4-3]
- Allow resource and operation defaults per resource or operation type
- Rebase on upstream 2.0.4 final release
- Support on-fail='demote' and no-quorum-policy='demote' options
- Remove incorrect comment from sysconfig file
- Resolves: rhbz1628701
- Resolves: rhbz1828488
- Resolves: rhbz1837747
- Resolves: rhbz1848789

[2.0.4-2]
- Improve cibsecret help and clean up code per static analysis
- Resolves: rhbz1793860

[2.0.4-1]
- Clear leaving node's attributes if there is no DC
- Add crm_mon --node option to limit display to particular node or tagged nodes
- Add crm_mon --include/--exclude options to select what sections are shown
- priority-fencing-delay option bases delay on where resources are active
- Pending DC fencing gets 'stuck' in status display
- crm_rule can now check rule expiration when 'years' is specified
- crm_mon now formats error messages better
- Support for CIB secrets is enabled
- Rebase on latest upstream Pacemaker release
- Fix regression introduced in 8.2 so crm_node -n works on remote nodes
- Avoid infinite loop when topology is removed while unfencing is in progress
- Resolves: rhbz1300604
- Resolves: rhbz1363907
- Resolves: rhbz1784601
- Resolves: rhbz1787751
- Resolves: rhbz1790591
- Resolves: rhbz1793653
- Resolves: rhbz1793860
- Resolves: rhbz1828488
- Resolves: rhbz1830535
- Resolves: rhbz1831775

[2.0.3-5]
- Clear leaving node's attributes if there is no DC
- Resolves: rhbz1791841

[2.0.3-4]
- Implement shutdown-lock feature
- Resolves: rhbz1712584

[2.0.3-3]
- Rebase on Pacemaker-2.0.3 final release
- Resolves: rhbz1752538

[2.0.3-2]
- Rebase on Pacemaker-2.0.3-rc3
- Resolves: rhbz1752538

[2.0.3-1]
- Rebase on Pacemaker-2.0.3-rc2
- Parse crm_mon --fence-history option correctly
- Put timeout on controller waiting for scheduler response
- Offer Pacemaker Remote option for bind address
- Calculate cluster recheck interval dynamically
- Clarify crm_resource help text
- Reduce system calls after forking a child process
- Resolves: rhbz1699978
- Resolves: rhbz1725236
- Resolves: rhbz1743377
- Resolves: rhbz1747553
- Resolves: rhbz1748805
- Resolves: rhbz1752538
- Resolves: rhbz1762025

[2.0.2-3]
- Make pacemaker-cli require tar and bzip2
- Resolves: rhbz#1741580

[2.0.2-2]
- Synchronize fence-history on fenced-restart
- Cleanup leftover pending-fence-actions when fenced is restarted
- Improve fencing of remote-nodes
- Resolves: rhbz#1708380
- Resolves: rhbz#1708378
- Resolves: rhbz#1721198
- Resolves: rhbz#1695737

[2.0.2-1]
- Add stonith_admin option to display XML output
- Add new crm_rule tool to check date/time rules
- List any constraints cleared by crm_resource --clear
- crm_resource --validate can now get resource parameters from command line
- Rebase on upstream version 2.0.2
- Default concurrent-fencing to true
- Resolves: rhbz#1555939
- Resolves: rhbz#1572116
- Resolves: rhbz#1631752
- Resolves: rhbz#1637020
- Resolves: rhbz#1695737
- Resolves: rhbz#1715426

[2.0.1-5]
- Add gating tests for CI
- Restore correct behavior when live migration is interrupted
- Improve clients' authentication of IPC servers (CVE-2018-16877)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Resolves: rhbz#1682116
- Resolves: rhbz#1684306
- Resolves: rhbz#1694558
- Resolves: rhbz#1694560
- Resolves: rhbz#1694908

[2.0.1-4]
- Remove duplicate fence history state listing in crm_mon XML output
- Resolves: rhbz#1667191

[2.0.1-3]
- Fix bundle recovery regression in 2.0.1-2
- Resolves: rhbz#1660592

[2.0.1-2]
- Move pacemaker-doc installed files to /usr/share/doc/pacemaker-doc
  to avoid conflict with RHEL 8 location of pacemaker subpackage docs
- Resolves: rhbz#1543494

[2.0.1-1]
- Rebase on upstream commit 0eb799156489376e13fb79dca47ea9160e9d4595 (Pacemaker-2.0.1-rc1)
- Follow upstream change of splitting XML schemas into separate package
- Resolves: rhbz#1543494

[2.0.0-11]
- Rebase on upstream commit efbf81b65931423b34c91cde7204a2d0a71e77e6
- Resolves: rhbz#1543494

[2.0.0-10]
- Rebase on upstream commit b67d8d0de9794e59719608d9b156b4a3c6556344
- Update spec for Python macro changes
- Resolves: rhbz#1543494
- Resolves: rhbz#1633612

[2.0.0-9]
- Rebase on upstream commit c4330b46bf1c3dcd3e367b436efb3bbf82ef51cd
- Support podman as bundle container launcher
- Ignore fence history in crm_mon when using CIB_file
- Resolves: rhbz#1543494
- Resolves: rhbz#1607898
- Resolves: rhbz#1625231

[2.0.0-8]
- Rebase on upstream commit dd6fd26f77945b9bb100d5a3134f149b27601552
- Fixes (unreleased) API regression
- Resolves: rhbz#1543494
- Resolves: rhbz#1622969

[2.0.0-7]
- Include upstream main branch commits through 975347d4
- Resolves: rhbz#1543494
- Resolves: rhbz#1602650
- Resolves: rhbz#1608369

[2.0.0-6]
- Rebuild with fixed binutils

[2.0.0-5]
- Rebase to upstream version 2.0.0 final
- Resolves: rhbz#1543494

[2.0.0-4]
- Rebase to upstream version 2.0.0-rc5
- Resolves: rhbz#1543494

[2.0.0-2]
- Rebase to upstream version 2.0.0-rc3
- Resolves: rhbz#1543494

[2.0.0-1]
- Rebase to upstream version 2.0.0-rc2 with later fixes
- Resolves: rhbz#1543494

[1.1.17-3]
- Stop hard requiring nagios-plugins

[1.1.17-2]
- Rebuilt to fix libqb vs. ld.bfd/binutils-2.29 incompatibility making
  some CLI executables unusable under some circumstances (rhbz#1503843)

[1.1.17-1.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.1.17-1.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.1.17-1]
- Update for new upstream tarball: Pacemaker-1.1.17,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17

[1.1.17-0.1.rc4]
- Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc4,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc4
- Add an imposed lower bound for glib2 BuildRequires

[1.1.17-0.1.rc3]
- Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc3,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc3

[1.1.17-0.1.rc2]
- Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc2,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc2

[1.1.17-0.1.rc1]
- Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc1,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc1

[1.1.16-2.a39ea6491.git]
- Update for (slightly stabilized) snapshot beyond Pacemaker-1.1.16
  (commit a39ea6491), including:
  . prevent FTBFS with new GCC 7 (a7476dd96)
- Adapt spec file more akin to upstream version including:
  . better pre-release vs. tags logic (4581d4366)

[1.1.16-1]
- Update for new upstream tarball: Pacemaker-1.1.16,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.16
- Adapt spec file more akin to upstream version including:
  . clarify licensing, especially for -doc (f01f734)
  . fix pacemaker-remote upgrade (779e0e3)
  . require python &gt;= 2.6 (31ef7f0)
  . older libqb is sufficient (based on 30fe1ce)
  . remove openssl-devel and libselinux-devel as BRs (2e05c17)
  . make systemd BR pkgconfig-driven (6285924)
  . defines instead of some globals + error suppression (625d427)
- Rectify -nagios-plugins-metadata declared license and install
  also respective license text

[1.1.15-3]
- Apply fix for CVE-2016-7035 (improper IPC guarding)

[1.1.15-2.1]
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages

[1.1.15-2]
- Stop building with -fstack-protector-all using the upstream patches
  overhauling toolchain hardening (Fedora natively uses
  -fstack-protector-strong so this effectively relaxed stack protection
  is the only effect as hardened flags are already used by default:
  https://fedoraproject.org/wiki/Changes/Harden_All_Packages)

[1.1.15-1]
- Update for new upstream tarball: Pacemaker-1.1.15,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15
- Adapt spec file more akin to upstream version:
  . move xml schema files + PCMK-MIB.txt (81ef956), logrotate configuration
    file (ce576cf; drop it from -remote package as well), attrd_updater
    (aff80ae), the normal resource agents (1fc7287), and common directories
    under /var/lib/pacemaker (3492794) from main package under -cli
  . simplify docdir build parameter passing and drop as of now
    redundant chmod invocations (e91769e)

[1.1.15-0.1.rc3]
- Update for new upstream tarball for release candidate: Pacemaker-1.1.15-rc3,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15-rc3
- Drop fence_pcmk (incl. man page) from the package (no use where no CMAN)
- Drop license macro emulation for cases when not supported natively
  (several recent Fedora releases do not need that)

[1.1.15-0.1.rc2]
- Update for new upstream tarball for release candidate: Pacemaker-1.1.15-rc2,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15-rc2

[1.1.15-0.1.rc1]
- Update for new upstream tarball for release candidate: Pacemaker-1.1.15-rc1,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15-rc1
- Adapt spec file more akin to upstream version (also to reflect recent
  changes like ability to built explicitly without Publican-based docs)

[1.1.14-2.5a6cdd1.git]
- Update for currently stabilized snapshot beyond Pacemaker-1.1.14
  (commit 5a6cdd1), but restore old-style notifications to the state at
  Pacemaker-1.1.14 point release (disabled)
- Definitely get rid of Corosync v1 (Flatiron) hypothetical support
- Remove some of the spec file cruft, not required for years
  (BuildRoot, AutoReqProv, 'clean' scriptlet, etc.) and adapt the file
  per https://github.com/ClusterLabs/pacemaker/pull/965

[1.1.14-1.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.1.14-1]
- Update for new upstream tarball: Pacemaker-1.1.14,
  for full details, see included ChangeLog file or
  https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.14
- Disable Fedora crypto policies conformance patch for now (rhbz#1179335)
- Better align specfile with the upstream version (also fix issue with
  crm_mon sysconfig file not being installed)
- Further specfile modifications:
  - drop unused gcc-c++ and repeatedly mentioned pkgconfig packages
    from BuildRequires
  - refer to python_sitearch macro first, if defined
  - tolerate license macro not being defined (e.g., for EPEL rebuilds)
- Prevent console mode not available in crm_mon due to curses library test
  fragility of configure script in hardened build environment (rhbz#1297985)

[1.1.13-4]
- Adapt to follow Fedora crypto policies (rhbz#1179335)

[1.1.13-3]
- Update to Pacemaker-1.1.13 post-release + patches (sync)
- Add nagios-plugins-metadata subpackage enabling support of selected
  Nagios plugins as resources recognized by Pacemaker
- Several specfile improvements: drop irrelevant stuff, rehash the
  included/excluded files + dependencies, add check scriptlet,
  reflect current packaging practice, do minor cleanups
  (mostly adopted from another spec)

[1.1.13-2]
- Update for new upstream tarball: Pacemaker-1.1.13
- See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details

[1.1.12-2.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.1.12-2]
- Address incorrect use of the dbus API for interacting with systemd

[1.1.12-1]
- Update for new upstream tarball: Pacemaker-1.1.12+ (a9c8177)
- See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details

[1.1.11-1.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.1.11-1.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.1.11-1]
- Update for new upstream tarball: Pacemaker-1.1.11 (9d39a6b)
- See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details

[1.1.9-3]
- Update to upstream 7d8acec
- See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details

  + Feature: Turn off auto-respawning of systemd services when the cluster starts them
  + Fix: crmd: Ensure operations for cleaned up resources don't block recovery
  + Fix: logging: If SIGTRAP is sent before tracing is turned on, turn it on instead of crashing

[1.1.9-2]
- Update for new upstream tarball: 781a388
- See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details

[1.1.2-1]
- Update the tarball from the upstream 1.1.2 release
- See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details

[1.0.4-1]
- Initial checkin</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2023-6970.html" type="self" title="ELEA-2023-6970" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="pacemaker" version="2.1.6" release="8.0.1.el8" epoch="0" arch="src">
          <filename>pacemaker-2.1.6-8.0.1.el8.src.rpm</filename>
          <sum type="sha256">bc65da7a8f3cd5bb1a76d683995f49fe6872ffddb6a091053c4eb38d0601bcd1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-4521</id>
    <title>libmodulemd bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.9.4-2]
- Update to 2.9.4
- Drop valgrind tests from RPM build
- Resolves: RHBZ#1797749</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-4521.html" type="self" title="ELEA-2020-4521" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libmodulemd" version="2.9.4" release="2.el8" epoch="0" arch="src">
          <filename>libmodulemd-2.9.4-2.el8.src.rpm</filename>
          <sum type="sha256">8ddd6cf43920711a9f85843745b56c190629fb4a3b24957b3d2cf9f8715fb0f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-1596</id>
    <title>lasso bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-05 00:00:00"/>
    <updated date="2020-05-05 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.6.0-8]
- Resolves: rhbz#1730018 - lasso includes Destination attribute in SAML
                           AuthnRequest populated with SP
                           AssertionConsumerServiceURL when ECP workflow
                           is used which leads to IdP-side errors</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-1596.html" type="self" title="ELBA-2020-1596" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="lasso" version="2.6.0" release="8.el8" epoch="0" arch="src">
          <filename>lasso-2.6.0-8.el8.src.rpm</filename>
          <sum type="sha256">7f01cd86478faacba11f604244b06d7b3afc7d3adc802769d0f04022faf2ff31</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-4543</id>
    <title>samba bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[4.12.3-12]
- resolves: #1868558 - cannot create a directory in home over SMB2, mkdirat returns EBADF

[4.12.3-11]
- resolves: #1859277 - Allow a user to use gencache

[4.12.3-10]
- related: #1856315 - Fix net-ads-join with LDAP over TLS

[4.12.3-9]
- related: #1817557 - Move DECRPC mdssvc data files to correct package
- resolves: #1856676 - Fix lookuprids in winbind

[4.12.3-8]
- resolves: #1856315 - Fix net-ads-join with LDAP over TLS

[4.12.3-7]
- resolves: #1855711 - Fix 'require_membership_of' documentation in
                       pam_winbind manpage

[4.12.3-6]
- related: #1842844 - Fix TLS connections with GnuTLS

[4.12.3-5]
- resolves: #1823612 - Fix segfault in 'net ads dns gethostbyname'
- resolves: #1792553 - Fix 'net ads join createcomputer=OU'

[4.12.3-4]
- resolves: #1850980 - Add 'additional dns hostname' to keytab
- resolves: #1850981 - Add net-ads-join dnshostname=fqdn option

[4.12.3-1]
- resolves: #1666737 - Add a new smbc_readdirplus2() function to libsmbclient
- resolves: #1842844 - Fix GnuTLS priority list for TLS connections

[4.12.3-0]
- resolves: #1817557 - Rebase to version 4.12.3
- resolves: #1813833 - Fix 'net ads join createupn='

[4.11.2-14]
- Rebuild with krb5 1.18
- Resolves: #1817578 - support krb5 1.18</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-4543.html" type="self" title="ELEA-2020-4543" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="samba" version="4.12.3" release="12.el8.3" epoch="0" arch="src">
          <filename>samba-4.12.3-12.el8.3.src.rpm</filename>
          <sum type="sha256">44f3d39978a318345874464da98a3d53d07b4911915fd21887c78025cfeb1e79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-4555</id>
    <title>libpsl bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.20.2-6]
- increase release number (#1764048)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-4555.html" type="self" title="ELEA-2020-4555" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libpsl" version="0.20.2" release="6.el8" epoch="0" arch="src">
          <filename>libpsl-0.20.2-6.el8.src.rpm</filename>
          <sum type="sha256">536ffcd7e55c601de3caeeedb56185ad229654d83636b614f1392c7e6e45c9a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-6919</id>
    <title> edk2 security and bug fix update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-17 00:00:00"/>
    <updated date="2023-11-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[20220126gitbb1bba3d77-6]
- edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267]
- Resolves: bz#2150267
  (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8])

[20220126gitbb1bba3d77-5]
- edk2-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch [bz#1861743]
- Resolves: bz#1861743
  (CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() [rhel-8])</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-6919.html" type="self" title="ELSA-2023-6919" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-14560.html" id="CVE-2019-14560" type="cve" title="CVE-2019-14560" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20220126gitbb1bba3d77" release="6.el8" epoch="0" arch="src">
          <filename>edk2-20220126gitbb1bba3d77-6.el8.src.rpm</filename>
          <sum type="sha256">579594d945d1fe007e3fc0dcd4ffa32509920d375f3297817ec9fffe2ae1f485</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-4596</id>
    <title>efivar bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[37-4]
- Fix efivar '-w' and '-a' options that broke due the rebase
  Related: rhbz#1755645

[37-3]
- Fix uninitialized variable found by covscan
  Related: rhbz#1755645

[37-2]
- Change License field to LGPL-2.1 to prevent rpminspect test to fail
  Related: rhbz#1755645

[37-1]
- Update to efivar 37 and some changes to support NVMe over FC
  Resolves: rhbz#1755645</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-4596.html" type="self" title="ELEA-2020-4596" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="efivar" version="37" release="4.el8" epoch="0" arch="src">
          <filename>efivar-37-4.el8.src.rpm</filename>
          <sum type="sha256">63665d58f8a0a82916b643e7f8a3b281220820d604ba3f9564b391ce79cc2a8e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-38947</id>
    <title> mingw-pdcurses  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-08-22 00:00:00"/>
    <updated date="2025-08-22 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[3.4-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.4-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.4-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.4-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.4-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.4-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[3.4-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[3.4-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[3.4-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[3.4-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[3.4-12]
- Add mingw64.
- Rework patch.
- Rename mingw32-pdcurses-3.4-build.patch into mingw-pdcurses-3.4-build.patch.

[3.4-11]
- Renamed the source package to mingw-pdcurses (#801012)
- Modernize the spec file
- Use mingw macros without leading underscore

[3.4-10]
- Rebuild against the mingw-w64 toolchain
- Use the correct toolchain tools in the patch

[3.4-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[3.4-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[3.4-7]
- Fix Source0 URL.

[3.4-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[3.4-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[3.4-4]
- Rebuild for mingw32-gcc 4.4

[3.4-3]
- Remove +x permissions on the header files.

[3.4-2]
- Rename implib to libpdcurses.dll.a so that libtool can use it.

[3.4-1]
- Initial RPM release.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-38947.html" type="self" title="ELBA-2025-38947" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="mingw-pdcurses" version="3.4" release="22.el8" epoch="0" arch="src">
          <filename>mingw-pdcurses-3.4-22.el8.src.rpm</filename>
          <sum type="sha256">00a7ab9381c9f62cad20c415f6a2fa7ad1b4654021671bcdcfc92eb8b60eaa1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12471</id>
    <title>OLVM 4.5.5 Extras update release</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-07-04 00:00:00"/>
    <updated date="2024-07-04 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>python-jmespath
[0.9.0-11.5]
- Fix incorrect Python 3.11 requirements for python3-jmespath package on EL8
- Simplify spec file

[0.9.0-11.4]
- Add Python 3.11 subpackage to be usable in ansible-core-2.14 for cs8

[0.9.0-11.3]
- Add Python 3.11 subpackage to be usable in ansible-core-2.14

python3.11-netaddr-epel
[0.8.0-2]
- Remove importlib dep

[0.8.0-1]
- Build for EPEL9

python3.11-passlib-epel
[1.7.4-1]
- Build for EPEL with Python 3.11

python-passlib
[1.7.0-5.1]
- Add Python 3.8 subpackage to be usable in ansible-core-2.12

[1.7.0-5]
- RHEL8 packaging

[1.7.0-4]
- Fix eggs-info generation

[1.7.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

python-bcrypt
[3.1.7-3]
- Subpackage python2-bcrypt has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[3.1.7-2]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[3.1.7-1]
- Update to 3.1.7
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12471.html" type="self" title="ELBA-2024-12471" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder_javapackages-tools_202201_8010020220812072339_1750bf99_noarch">
        <name>ol8_aarch64_distro_builder_javapackages-tools_202201_8010020220812072339_1750bf99_noarch</name>
        <module name="javapackages-tools" stream="202201" version="8010020220812072339" context="1750bf99" arch="noarch" />
        <package name="slf4j-jdk14" version="1.7.32" release="4.module+el8.7.0+20821+05ddc2c8" epoch="0" arch="noarch">
          <filename>slf4j-jdk14-1.7.32-4.module+el8.7.0+20821+05ddc2c8.noarch.rpm</filename>
          <sum type="sha256">7adbca1a1ce9b5c066bab9adba1eaa7c892400d634f6da707833373450f9936c</sum>
        </package>
      </collection>
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="slf4j" version="1.7.32" release="4.module+el8.7.0+20821+05ddc2c8" epoch="0" arch="src">
          <filename>slf4j-1.7.32-4.module+el8.7.0+20821+05ddc2c8.src.rpm</filename>
          <sum type="sha256">3beedaaba0831d7435351447c62e70e72b9d5fb6603c130d290f8b0f43aa55b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-6976</id>
    <title> libfastjson security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-17 00:00:00"/>
    <updated date="2023-11-17 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[0.99.9-2]
- Address CVE-2020-12762
Resolves: rhbz#2203171</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-6976.html" type="self" title="ELSA-2023-6976" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12762.html" id="CVE-2020-12762" type="cve" title="CVE-2020-12762" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libfastjson" version="0.99.9" release="2.el8" epoch="0" arch="src">
          <filename>libfastjson-0.99.9-2.el8.src.rpm</filename>
          <sum type="sha256">537ff8d256253ec70b7450046cc49eaf7b756cc9f4f719a2f5074a0b15c7e9f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-4680</id>
    <title>lmdb bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.9.24-1]
- RHEL 8.3.0 ERRATUM
- rebase to 0.9.24
- Resolves: rhbz#1817421</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-4680.html" type="self" title="ELEA-2020-4680" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="lmdb" version="0.9.24" release="1.el8" epoch="0" arch="src">
          <filename>lmdb-0.9.24-1.el8.src.rpm</filename>
          <sum type="sha256">721010963a42a9fdba848a850d3ff1a104a5990026d9d7173c3c4509b3da1000</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-4692</id>
    <title>libuv bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1:1.38.0-2]
- Fix max path size by not using _POSIX_PATH_MAX
  Resolves: #1879330
  Fixes: CVE-2020-8252

[1:1.38.0-1]
- Update, disable failing tests

[1:1.37.0-3]
- Run tests

[1:1.37.0-2]
- Resolves: RHBZ#1817821
- bump for build

[1:1.37.0-1]
- Resolves: RHBZ#1817821
- Update to 1.37.0
- Add abidiff ignore file</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-4692.html" type="self" title="ELEA-2020-4692" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libuv" version="1.38.0" release="2.el8" epoch="1" arch="src">
          <filename>libuv-1.38.0-2.el8.src.rpm</filename>
          <sum type="sha256">821e623c8ff1e40aa1b4ffa3c2f7fe41e65542876001dd9fb4d45c273b833f5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-1633</id>
    <title>xorg X11 server and driver bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-05 00:00:00"/>
    <updated date="2020-05-05 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>egl-wayland
[1.1.4-1]
- egl-wayland 1.1.4

libdrm
[2.4.100-1]
- Update to 2.4.100

libepoxy
[1.5.3-1]
- libepoxy 1.5.3

libglvnd
[1.2.0-6]
- version provides

[1.2.0-5]
- Add another conflict

[1.2.0-4]
- conflict

[1.2.0-3]
- more conflicts

[1.2.0-2]
- add conflicts

[1.2.0-1]
- libglvnd 1.2.0

libX11
[1.6.8-3]
- Fix race condition in poll_for_reponse

[1.6.8-2]
- Fix assertion on error in XCopyColormapAndFree

[1.6.8-1]
- libX11 1.6.8

libxcb
[1.13.1-1]
- libxcb 1.13.1

libXpm
[3.5.12-8.el8]
- add covscan fixes (#1602606)

libXvMC
[1.0.10-7]
- bump n-v-r for #1712609

mesa
[19.3.4-2]
- Fix put image shm fallback path.

[19.3.4-1]
- Update to 19.3.4 release (s390x fix)

[19.3.3-1]
- Update to 19.3.3 release

[19.3.0-3]
- drop khr-devel subpackage from here

[19.3.0-2]
- sort out libglvnd requires

[19.3.0-1]
- mesa-19.3.0-rc4

mesa-demos
[8.4.0-4.20181118git1830dcb.0.1]
- Add missing BuildRequires

[8.4.0-4.20181118git1830dcb]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[8.4.0-3.20181118git1830dcb]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[8.4.0-2.20181118git1830dcb]
- Start using proper git version strings for rawhide
- Enabling building of wayland and freetype demos

[8.4.0-1]
- New git snapshot

[8.3.0-12]
- Rebuilt for glew 2.1.0

[8.3.0-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[8.3.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

mesa-libGLw
[8.0.0-18]
- Update to git snapshot of the archived state

pixman
[0.38.4-1]
- pixman 0.38.4

wayland
[1.17.0-1]
- wayland 1.17.0

wayland-protocols
[1.18-1]
- Update to 1.18
  Resolves: #1728816

xorg-x11-drv-ati
[19.0.1-2]
- Fix a regression with user-switching (#1757864)

xorg-x11-drv-libinput
[0.29.0-1]
- xf86-input-libinput 0.29.0 (#1728820)

xorg-x11-drv-wacom
[0.38.0-1]
- wacom 0.38.0 (#1728822)

xorg-x11-server
[1.20.6-3]
- Add fix for crash with Option Rotate in xorg.conf
  Resolves: #1795328

[1.20.6-2]
- Add fixes for intermittent modesetting artifacts
  Resolves: #1738670

[1.20.6-1]
- xserver 1.20.6</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-1633.html" type="self" title="ELBA-2020-1633" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="egl-wayland" version="1.1.4" release="1.el8" epoch="0" arch="src">
          <filename>egl-wayland-1.1.4-1.el8.src.rpm</filename>
          <sum type="sha256">cbce6041a6bd8ff98c7c73c1263e5537cdc306e30c14a902f9e188a860571221</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-4711</id>
    <title>HdrHistogram_c bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.9.13-2]
- Rebuild for CI/gating

[0.9.13-1]
- Initial version for RHEL-8 (BZ 1748643)

[0.9.12-1]
- New version

[0.9.11-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[0.9.11-1]
- Initial package version</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-4711.html" type="self" title="ELEA-2020-4711" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="HdrHistogram_c" version="0.9.13" release="2.el8" epoch="0" arch="src">
          <filename>HdrHistogram_c-0.9.13-2.el8.src.rpm</filename>
          <sum type="sha256">f3a4748783878a1281b210a03ee80b5a7a52c2842c559dd0b761eb5cf0f69b0b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-10095</id>
    <title> corosync-qdevice  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-12-20 00:00:00"/>
    <updated date="2022-12-20 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[3.0.1-1]
- Resolves: rhbz#1752386
- Resolves: rhbz#1879351

- New upstream release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-10095.html" type="self" title="ELBA-2022-10095" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync-qdevice" version="3.0.1" release="1.el8" epoch="0" arch="src">
          <filename>corosync-qdevice-3.0.1-1.el8.src.rpm</filename>
          <sum type="sha256">88715fc9f0fa8fcacce34b1df9ad80abf0668c25a7a53c1331f87929c17a3d49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-10098</id>
    <title> corosync  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-12-20 00:00:00"/>
    <updated date="2022-12-20 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[3.1.5-2]
- Resolves: rhbz#2002115
- Resolves: rhbz#2024658

- totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
- merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
- totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
- merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)

[3.1.5-1]
- Related: rhbz#1948973

- New upstream release (rhbz#1948973)

[3.1.4-1]
- Related: rhbz#1948973
- Resolves: rhbz#1962139

- New upstream release (rhbz#1948973)
- stats: fix crash when iterating over deleted keys (rhbz#1962139)

[3.1.3-1]
- Resolves: rhbz#1948973

- New upstream release (rhbz#1948973)

[3.1.0-5]
- Resolves: rhbz#1954432

[3.1.0-4]
- Resolves: rhbz#1946623

- knet: pass correct handle to knet_handle_compress (rhbz#1946623)

[3.1.0-3]
- Resolves: rhbz#1897085
- Resolves: rhbz#1896493

- spausedd: Add ability to move process into root cgroup (rhbz#1897085)
- totemknet: Check both cipher and hash for crypto (rhbz#1896493)

[3.1.0-2]
- Resolves: rhbz#1896309

- Fix log_perror (rhbz#1896309)

[3.1.0-1]
- Resolves: rhbz#1855293
- Resolves: rhbz#1855303
- Resolves: rhbz#1870449
- Resolves: rhbz#1887400

- New upstream release (rhbz#1855293)
- Support for reload of crypto configuration (rhbz#1855303)
- Increase default token timeout to 3000ms (rhbz#1870449)
- Add support for nodelist callback into quorum service (rhbz#1887400)

[3.0.3-4]
- Resolves: rhbz#1780137
- Resolves: rhbz#1791792
- Resolves: rhbz#1809864
- Resolves: rhbz#1816653

- votequorum: Ignore the icmap_get_* return value (rhbz#1780137)
- merge upstream commit cddd62f972bca276c934e58f08da84071cec1ddb (rhbz#1780137)
- man: move cmap_keys man page from section 8 to 7 (rhbz#1791792)
- merge upstream commit f1d36307e524f9440733f0b01a9fc627a0e1cac7 (rhbz#1791792)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780137)
- merge upstream commit 8ce65bf951bc1e5b2d64b60ea027fbdc551d4fc8 (rhbz#1780137)
- stats: Add stats for scheduler misses (rhbz#1791792)
- merge upstream commit 48b6894ef41e9a06ccbb696d062d86ef60dc2c4b (rhbz#1791792)
- stats: Use nanoseconds from epoch for schedmiss (rhbz#1791792)
- merge upstream commit ebd05fa00826c366922e619b012a0684c6856539 (rhbz#1791792)
- main: Add schedmiss timestamp into message (rhbz#1791792)
- merge upstream commit 35662dd0ec53f456445c30c0ef92892f47b25aa2 (rhbz#1791792)
- votequorum: Change check of expected_votes (rhbz#1809864)
- merge upstream commit 0c16442f2d93f32a229b87d2672e2dc8025ec704 (rhbz#1809864)
- quorumtool: exit on invalid expected votes (rhbz#1809864)
- merge upstream commit 5f543465bb3506b7f4929a426f1c22a9c854cecd (rhbz#1809864)
- votequorum: set wfa status only on startup (rhbz#1816653)
- merge upstream commit ca320beac25f82c0c555799e647a47975a333c28 (rhbz#1816653)

[3.0.3-3]
- Resolves: rhbz#1828295

- Add explicit spausedd dependency for revdeps CI test

[3.0.3-2]
- Related: rhbz#1745623

- New upstream release of spausedd

[3.0.3-1]
- Resolves: rhbz#1745623

- New upstream release

[3.0.2-4]
- Resolves: rhbz#1745624
- Resolves: rhbz#1745642
- Resolves: rhbz#1749263
- Resolves: rhbz#1765025

- totem: fix check if all nodes have same number of links (rhbz#1749263)
- merge upstream commit 816324c94cfb917b11f43954b8757424db28b390 (rhbz#1749263)
- totem: Increase ring_id seq after load (rhbz#1745624)
- merge upstream commit 3675daceeeeb72af043f5c051daed463fdd2d2a1 (rhbz#1745624)
- man: Fix link_mode priority description (rhbz#1745642)
- merge upstream commit 0a323ff2ed0f2aff9cb691072906e69cb96ed662 (rhbz#1745642)
- totemsrp: Reduce MTU to left room second mcast (rhbz#1765025)
- merge upstream commit ee8b8993d98b3f6af9c058194228fc534fcd0796 (rhbz#1765025)

[3.0.2-3]
- Resolves: rhbz#1738218

- Do not set exec permission for service file
- Fix CFLAGS definition

[3.0.2-2]
- Related: rhbz#1679656

- Improve spausedd test

[3.0.2-1]
- Resolves: rhbz#1705591
- Resolves: rhbz#1688889</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-10098.html" type="self" title="ELBA-2022-10098" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync" version="3.1.5" release="2.el8" epoch="0" arch="src">
          <filename>corosync-3.1.5-2.el8.src.rpm</filename>
          <sum type="sha256">101f8eaa0388a5cc5352677a64a4df05d282a0cd4ad007dfa79df61553d2c5e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1773</id>
    <title>cheese bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2:3.28.0-3]
- Fix keyboard accelerator patch (#1625735)

[2:3.28.0-2]
- Fix keyboard accelerators (#1625735)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1773.html" type="self" title="ELBA-2021-1773" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="cheese" version="3.28.0" release="3.el8" epoch="2" arch="aarch64">
          <filename>cheese-3.28.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">7d6790a661f5a53df78b9b9a694fe52993942cfa3c796093fee3992c9ba41558</sum>
        </package>
        <package name="cheese" version="3.28.0" release="3.el8" epoch="2" arch="src">
          <filename>cheese-3.28.0-3.el8.src.rpm</filename>
          <sum type="sha256">0b5e85d75f731300d52540e3bc8d552615db52884f13025ccec09092bf7db53f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1780</id>
    <title>corosync bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[3.1.0-3]
- Resolves: rhbz#1897085
- Resolves: rhbz#1896493

- spausedd: Add ability to move process into root cgroup (rhbz#1897085)
- totemknet: Check both cipher and hash for crypto (rhbz#1896493)

[3.1.0-2]
- Resolves: rhbz#1896309

- Fix log_perror (rhbz#1896309)

[3.1.0-1]
- Resolves: rhbz#1855293
- Resolves: rhbz#1855303
- Resolves: rhbz#1870449
- Resolves: rhbz#1887400

- New upstream release (rhbz#1855293)
- Support for reload of crypto configuration (rhbz#1855303)
- Increase default token timeout to 3000ms (rhbz#1870449)
- Add support for nodelist callback into quorum service (rhbz#1887400)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1780.html" type="self" title="ELBA-2021-1780" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync" version="3.1.0" release="3.el8" epoch="0" arch="src">
          <filename>corosync-3.1.0-3.el8.src.rpm</filename>
          <sum type="sha256">add346bec294a862f5061ec9b7df6bd1bfb30598cbdeaeb3a8f4d48bcf051e72</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-4742</id>
    <title>userspace graphics, xorg-x11, and mesa bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>libdrm
[2.4.101-1]
- Update to 2.4.101

libvdpau
[1.4-2]
- keep only one devel package
- fix source url
- fix prep stage

[1.4-1]
- Update to 1.4

[1.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.3-1]
- Update to 1.3
- Switch to meson build
- Use an easier URL for source

[1.2-3]
- Fetch VP9 support

[1.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.2-1]
- Update to 1.2

[1.1.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.1.1-11]
- Apply patches from upstream

[1.1.1-10]
- Add missng cc

[1.1.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.1.1-8]
- Move libvdpau_trace to trace sub-package
- Spec file clean-up

libwacom
[1.1-3]
- Add a set of Lenovo tablets and styli (#1850319)

libXau
[1.0.9-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.0.9-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.0.9-1]
- update to 1.0.9

[1.0.8-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.0.8-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

libXdmcp
[1.1.3-1]
- libXdmcp 1.1.3

libXext
[1.3.4-1]
- libXext 1.3.4

[1.3.3-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.3.3-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

libXft
[2.3.3-1]
- libXft 2.3.3

libXi
[1.7.10-1]
- libXi 1.7.10

[1.7.9-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.7.9-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

libxkbfile
[1.1.0-1]
- libxkbfile 1.1.0

[1.0.9-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.0.9-11]
- Add buildrequires gcc (#1604693 because of #1551327)

[1.0.9-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

libXmu
[1.1.3-1]
- libXmu 1.1.3

[1.1.2-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

libXrandr
[1.5.2-1]
- libXrandr 1.5.2

[1.5.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.5.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

libXvMC
[1.0.12-1]
- libXvMC 1.0.12

libXxf86dga
[1.1.5-1]
- libXxf86dga 1.1.5

[1.1.4-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.1.4-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

mesa
[20.1.4-1]
- Update to 20.1.4
- Update nouveau tu1xx support patch (Karol)

[20.1.2-3]
- a fix on top of the big-endian fix (#1847064)

[20.1.2-2]
- add another fix for big-endian llvmpipe (#1847064)

[20.1.2-1]
- Update to 20.1.2
- add fix for big-endian llvmpipe (#1847064)

[20.1.1-1]
- Update to 20.1.1
- Add support for turing

[20.1.0-1]
- Update to 20.1.0 final

[20.1.0-0.1.rc4]
- Update to 20.1.0-rc4

mesa-demos
[8.4.0-5.20181118git1830dcb]
- Rebuild for RHEL 8.3

xorg-x11-drv-ati
[19.1.0-1]
- ati 19.1.0 (#1728818)
- Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
  merged upstream
- Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &amp;
  0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
  upstream Git master, fixing crashes with ShadowFB

xorg-x11-drv-intel
[2.99.917-39.20200205]
- Sync the driver snapshot with Fedora 32

xorg-x11-proto-devel
[2020.1-3]
- Ship XKBgeom.h from this package until libX11 is rebased

[2020.1-2]
- xorgproto 2020.1

[2019.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[2019.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[2019.1-1]
- xorgproto 2019.1
- drop files for xf86misc and proxy management proto, theyre legacy now

[2018.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[2018.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

xorg-x11-server
[1.20.8-6]
- xfree86: add drm modes on non-GTF panels
  Resolves: #1823461

[1.20.8-5]
- xwayland: Hold a pixmap reference in struct xwl_present_event
  Related: #1728684
- glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling
  Resolves: #1740250

[1.20.8-4]
- Dont switch VTs in the exit path, if killed on inactive VT
  Related: #1618481

[1.20.8-3]
- Downgrade modesetting 'glamor initialization failed' X_ERROR -&gt; X_INFO
  Resolves: #1724573
- Xwayland / Present leak fixes for #1728684

[1.20.8-2]
- Re-enable Xwayland Present support
  Resolves: #1728684, #1715676
- Remove unused patch

[1.20.8-1]
- xserver 1.20.8

xorg-x11-util-macros
[1.19.2-1]
- util-macros 1.19.2

xorg-x11-xkb-utils
[7.7-28]
- Downgrade errors about unresolved keysyms to warnings (#1780463)

xorg-x11-xtrans-devel
[1.4.0-1]
- xtrans 1.4.0</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-4742.html" type="self" title="ELEA-2020-4742" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="mesa" version="20.1.4" release="1.el8" epoch="0" arch="src">
          <filename>mesa-20.1.4-1.el8.src.rpm</filename>
          <sum type="sha256">9965fb56b9e25f638dbb2d76a58547772f011c1c656c9b8d2307ac68769037b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-7139</id>
    <title> samba security, bug fix, and enhancement update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-11-18 00:00:00"/>
    <updated date="2023-11-18 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>evolution-mapi
[3.28.3-8]
- Related: #2190417 - Rebuild for samba rebase to 4.18.x

openchange
[2.3-32.0.1]
- Use ldconfig_scriptlets

[2.3-32]
- Related: #2190417 (Rebuild for samba rebase to 4.18.x)

samba
[4.18.6-1]
- related: rhbz#2190417 - Update to version 4.18.6
- resolves: rhbz#2232564 - Fix the rpc dsgetinfo command

[4.18.5-0]
- resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968

[4.18.4-2]
- resolves: rhbz#2222884 - Fix trust relationship between workstation and DC

[4.18.4-1]
- resolves: rhbz#2221594 - Fix broken symlink for libwbclient
- resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with winbind scan trusted domains = yes
- resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/
- resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning

[4.18.4-0]
- resolves: rhbz#2190417 - Update to version 4.18.4

[4.18.3-0]
- resolves: rhbz#2190417 - Update to version 4.18.3

[4.18.2-2]
- resolves: rhbz#2190417 - Rebuild to trigger distrobaker sync

[4.18.2-1]
- resolves: rhbz#2190417 - Add missing tests to fix osci.brew-build.tier0.functional

[4.18.2-0]
- resolves: rhbz#2190417 - Update to version 4.18.2

[4.17.5-2]
- resolves: rhbz#2169339 - Fix winbind memory leak
- resolves: rhbz#2152899 - Fix Samba shares not accessible issue

[4.17.5-1]
- resolves: rhbz#2167691 - Create package samba-tools

[4.17.5-0]
- related: rhbz#2132051 - Update to version 4.17.5

[4.17.4-1]
- related: rhbz#2132051 - Create package dc-libs also for 'non-dc build'

[4.17.4-0]
- related: rhbz#2132051 - Update to version 4.17.4
- resolves: rhbz#2154370 - Fix CVE-2022-38023
- resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
- resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory

[4.17.2-2]
- Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
- related: rhbz#2132051

[4.17.2-1]
- resolves: rhbz#2132051 - Update to version 4.17.2
- resolves: rhbz#2126174 - Fix CVE-2022-1615
- resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients

[4.16.4-2]
- resolves: rhbz#2120956 - Do not require samba package in python3-samba

[4.16.4-1]
- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742

[4.16.3-0]
- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name

[4.16.2-1]
- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout

[4.16.2-0]
- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2

[4.16.1-0]
- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release

[4.15.5-8]
- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls

[4.15.5-7]
- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error

[4.15.5-6]
- resolves: rhbz#2059151 - Fix username map for unix groups
- resolves: rhbz#2065212 - Fix 'create krb5 conf = yes when a KDC has a single IP address.

[4.15.5-4]
- resolves: rhbz#2057503 - Fix winbind kerberos ticket refresh

[4.15.5-3]
- related: rhbz#1979959 - Fix typo in testparm output

[4.15.5-2]
- resolves: rhbz#1979959 - Improve idmap autorid sanity checks and documentation

[4.15.5-1]
- resolves: #1995849 - [RFE] Change change password change prompt phrasing
- resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file

[4.15.5-0]
- Update to Samba 4.15.5
- related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
- resolves: rhbz#2046127 - Fix CVE-2021-44141
- resolves: rhbz#2046153 - Fix CVE-2021-44142
- resolves: rhbz#2044404 - Printing no longer works on Windows 7
- resolves: rhbz#2043154 - Fix systemd notifications
- resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)

[4.15.4-0]
- Update to Samba 4.15.4
- related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
- resolves: rhbz#2039153 - Fix CVE-2021-20316
- resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
- resolves: rhbz#2039157 - Fix CVE-2021-43566
- resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
- resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
- resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED

[4.15.3-1]
- related: rhbz#2013596 - Rebase to version 4.15.3
- resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind
- resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired

[4.15.2-2]
- related: rhbz#2013596 - Remove unneeded lmdb dependency

[4.15.2-1]
- resolves: rhbz#2013596 - Rebase to version 4.15.2
- resolves: rhbz#1999294 - Remove noisy error message in winbindd
- resolves: rhbz#1958881 - Don't require winbind being online for krb5 auth
                           with one-way trusts
- resolves: rhbz#2019461 - Fix deleting directories with dangling symlinks

[4.14.5-14]
- related: rbhz#2019674 - Fix CVE-2020-25717
- Fix running ktest (selftest)

[4.14.5-13]
- related: rbhz#2019674 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role

[4.14.5-12]
- related: rbhz#2019674 - Fix regression with 'allow trusted domains = no'

[4.14.5-11]
- resolves: rhbz#2021425 - Add missing PAC buffer types to krb5pac.idl

[4.14.4-3]
- resolves: rhbz#2019662 - Fix CVE-2016-2124
- resolves: rhbz#2019668 - Fix CVE-2021-23192
- resolves: rbhz#2019674 - Fix CVE-2020-25717

[ 4.14.4-2]
- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0

[4.14.4-1]
- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message

[4.14.4-0]
- related: rhbz#1944657 - Update to version 4.14.5
- resolves: rhbz#1969787 - Fix memory leak in RPC server
- resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
- resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
- resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
- resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags

[4.14.4-4]
- related: rhbz#1944657 - Fix possible upgrade issues

[4.14.4-2]
- resolves: rhbz#1944657 - Update to version 4.14.4
- resolves: rhbz#1949445 - Fix CVE-2021-20254
- resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
- resolves: rhbz#1908506 - Fix creating the gencache user directory
- resolves: rhbz#1901029 - Build the vfs_io_uring module

[4.13.3-3]
- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services

[4.13.3-2]
- resolves: #1909647 - Fix winbind in trust scenarios with connection issues

[4.13.3-1]
- related: #1878109 - Rebase Samba to version 4.13.3

[4.13.2-5]
- resolves: #1904174 - Fix ldap timeout with 'net ads join'

[4.13.2-4]
- resolves: #1902198 - Document weak crypto output of testparm

[4.13.2-3]
- resolves: #1899113 - Fix following dfs links with smb clients

[4.13.2-2]
- related: #1869702 - Fix spoolss crash
- resolves: #1896736 - Fix name lookups of FreeIPA users
- resolves: #1899113 - Fix DFS links

[4.13.2-1]
- resolves: #1878109 - Rebase Samba to version 4.13.2
- resolves: #1872833 - Add samba-winexe subpackage
- resolves: #1891688 - Fix CVE-2020-14323
- resolves: #1892633 - Fix CVE-2020-14318
- resolves: #1892639 - Fix CVE-2020-14383
- resolves: #1879835 - Fix CVE-2020-1472
- resolves: #1888990 - Update smb.conf manpages to describe how to apply
                       config changes.
- resolves: #1869702 - Fix %U substitution for 'valid users' option
- resolves: #1818038 - Improve FIPS compliance

[4.12.3-12]
- resolves: #1868558 - cannot create a directory in home over SMB2, mkdirat returns EBADF

[4.12.3-11]
- resolves: #1859277 - Allow a user to use gencache

[4.12.3-10]
- related: #1856315 - Fix net-ads-join with LDAP over TLS

[4.12.3-9]
- related: #1817557 - Move DECRPC mdssvc data files to correct package
- resolves: #1856676 - Fix lookuprids in winbind

[4.12.3-8]
- resolves: #1856315 - Fix net-ads-join with LDAP over TLS

[4.12.3-7]
- resolves: #1855711 - Fix 'require_membership_of' documentation in
                       pam_winbind manpage

[4.12.3-6]
- related: #1842844 - Fix TLS connections with GnuTLS

[4.12.3-5]
- resolves: #1823612 - Fix segfault in 'net ads dns gethostbyname'
- resolves: #1792553 - Fix 'net ads join createcomputer=OU'

[4.12.3-4]
- resolves: #1850980 - Add 'additional dns hostname' to keytab
- resolves: #1850981 - Add net-ads-join dnshostname=fqdn option

[4.12.3-1]
- resolves: #1666737 - Add a new smbc_readdirplus2() function to libsmbclient
- resolves: #1842844 - Fix GnuTLS priority list for TLS connections

[4.12.3-0]
- resolves: #1817557 - Rebase to version 4.12.3
- resolves: #1813833 - Fix 'net ads join createupn='

[4.11.2-14]
- Rebuild with krb5 1.18
- Resolves: #1817578 - support krb5 1.18

[4.11.2-13]
- resolves: #1802182 - Fix join using netbios name

[4.11.2-12]
- related: #1781232 - Improve debug output of smbclient
- resolves: #1794461 - Do not return bogus inode numbers in
                       cli_qpathinfo2()/cli_qpathinfo3() for SMB1
- resolves: #1794442 - Fix segfault in smbd_do_qfilepathinfo()

[4.11.2-11]
- resolves: #1778130 - Remove usage of DES encryption types in krb5

[4.11.2-10]
- resolves: #1790353 - Fix access check in DsRGetForestTrustInformation
- resolves: #1791209 - Fix CVE-2019-14907

[4.11.2-9]
- resolves: #1785134 - Fix libwbclient manual alternative settings

[4.11.2-8]
- resolves: #1781232 - Fix smbclient debug message

[4.11.2-7]
- related: #1637861 - Fix trust creation if weak crypto is disallowed

[4.11.2-6]
- resolves: #1637861 - Use GnuTLS for crypto

[4.11.2-4]
- related: #1754409 - Add patch to avoid overlinking with libnsl and libsocket
- related: #1754409 - Fix permissions for pidl
- related: #1754409 - Fix logrotate script
- related: #1754409 - Add missing README files

[4.11.2-3]
- related: #1754409 - Fix pidl packaging

[4.11.2-1]
- resolves: #1754409 - Rebase to Samba version 4.11.2
- resolves: #1776312 - Winbind is not restarted on upgrade
- resolves: #1764469 - Fix CVE-2019-10218
- resolves: #1746241 - Fix CVE-2019-10197
- resolves: #1710980 - Add support for KCM ccache in pam_winbind

[4.10.4-101]
- related: #1760824 - Removed additional issues with overlinking

[4.10.4-100]
- resolves: #1754575 - Avoid overlinking with librt and libpthread
- resolves: #1755440 - Fix forest trusts enumeration
- resolves: #1755445 - Fix CUPS username/password authentication with smbspool

[4.10.4-1]
- resolves: #1712378 - Fix smbspool CUPS backend
- resolves: #1696612 - Fix 'net ads join -U admin@parentdomain'

[4.10.4-0]
- related: #1638001 - Rebase to Samba version 4.10.4
- resolves: #1597298 - Build Samba with python3
- resolves: #1658558 - Add 'net ads leave --keep-account' option
- resolves: #1669004 - Fix systemd status notifications
- resolves: #1672167 - Fix printing cache timeout in debug output
- resolves: #1696525 - Fix CVE-2019-3880

[4.10.3-0]
- related: #1638001 - Rebase to Samba version 4.10.3

[4.10.2-1]
- related: #1638001 - Fix package upgrades

[4.10.2-0]
- resolves: #1638001 - Rebase Samba to version 4.10

[4.9.1-8]
- resolves: #1663421 - Fix perl interpreter dependencies

[4.9.1-7]
- resolves: #1658690 - Add smbc_setOptionProtocols()
- resolves: #1658678 - Fix spoolss client operations against Windows

[4.9.1-6]
- resolves: #1642092 - Harden [homes] share export
- resolves: #1648846 - Fix out of bound array access in ctdb
- resolves: #1657266 - Fix tmp directory creation in /run

[4.9.1-5]
- resolves: #1644327 - Segfault if wrong 'passdb backend' is configured
- resolves: #1647959 - Segfault in the debug system with hardended build

[4.9.1-4]
- related: #1614232 - Fix some spec file issues detected by rpmdiff

[4.9.1-3]
- Temporarily remove smbtorture from samba-test due to Python 2 linkage
- related: #1609661 - samba-test package cannot be installed due to unresolved dependencies

[4.9.1-2]
- related: #1614232 - Add CTDB examples with a config migration script

[4.9.1-1]
- resolves: #1614232 - Update to Samba 4.9.1

[4.9.0rc5-3]
- related: #1614232 - Update to Samba 4.9.0rc5
- resolves: #1610909 - Re-enable glubsterfs vfs module
- resolves: #1624170 - Build with -fstack-protectore-strong if available
- resolves: #1602685 - Fixed issues found by covscan

[4.9.0rc3-3]
- related: #1614232 - Update to Samba 4.9.0rc3
- resolves: #1554753 - Fix CVE-2018-1050
- resolves: #1617912 - Fix CVE-2018-10858
- resolves: #1617913 - Fix CVE-2018-10918
- resolves: #1617914 - Fix CVE-2018-10919
- resolves: #1617915 - Fix CVE-2018-1139
- resolves: #1612522 - Manpage fixes

[4.9.0rc2-2]
- Update to Samba 4.9.0rc2

[4.9.0rc1-2]
- Do not package Python 2 artefacts by default

[4.9.0rc1-1]
- Don't build dns and dsdb-related modules without AD DC

[4.9.0rc1-0]
- Update to Samba 4.9.0rc1

[4.8.3-2]
- Use %{__python2}, not 'python', as the Python2 interpreter
- Add workaround to allow building with Python 2
- Change unversioned python macros to python2
- Disable gluster temporarily

[4.8.3-1]
- Update to Samba 4.8.3
- Remove python(2|3)-subunit dependency

[2:4.8.2-1.1]
- Rebuilt for Python 3.7

[4.8.2-0]
- Update to Samba 4.8.2

[4.8.1-1]
- resolves: #1574177 - Fix smbspool command line argument handling

[4.8.1-0]
- Update to Samba 4.8.1

[4.8.0-7]
- resolves: #1554754, #1554756 - Security fixes for CVE-2018-1050 CVE-2018-1057
- resolves: #1555112 - Update to Samba 4.8.0

[4.8.0rc4-6]
- resolves: #1552652 - Fix usage of nc in ctdb tests and only recommned it

[4.8.0rc4-5]
- Update to Samba 4.8.0rc4

[4.8.0rc3-4]
- Update to Samba 4.8.0rc3

[2:4.8.0-0.3.rc2.1]
- Escape macros in %changelog

[4.8.0rc2-3]
- Update to Samba 4.8.0rc2

[2:4.8.0-0.2.rc1]
- Explicitly BR: rpcsvc-proto-devel

[2:4.8.0-0.1.rc1.1]
- Rebuilt for switch to libxcrypt

[4.8.0rc1-1]
- Update to Samba 4.8.0rc1

[4.7.4-1]
- resolves: #1508092 - Add missing dependency for tdbbackup

[4.7.4-0]
- Update to Samba 4.7.4

[4.7.3-3]
- resolves: #1520163 - Link libaesni-intel-samba4.so with -z noexecstack

[4.7.3-2]
- Fix deamon startup with systemd

[4.7.3-1]
- Enable AES acceleration on Intel compatible CPUs by default

[4.7.3-0]
- Update to Samba 4.7.3
- resolves: #1515692 - Security fix for CVE-2017-14746 and CVE-2017-15275

[4.7.2-0]
- resolves: #1513452 - Update to Samba 4.7.2

[4.7.1-2]
- Fix release number

[4.7.1-1]
- Remove old crufty coreutils requires

[4.7.1-0]
- resolves: #1508871 - Update to Samba 4.7.1

[4.7.0-18]
- Force samba-dc to use the same libldb version as LDB modules compiled
- resolves: #1507420 - LDB / Samba module version mismatch

[4.7.0-17]
- Move dsdb libs to python2-samba-dc

[4.7.0-16]
- Create python[2|3]-samba-dc packages

[4.7.0-15]
- related: #1499140 - Fix several dependency issues
- Fix building with MIT Kerberos 1.16

[4.7.0-14]
- resolves: #1499140 - Move libdfs-server-ad to the correct subpackage

[4.7.0-13]
- Move /usr/lib{64,}/samba/libdsdb-garbage-collect-tombstones-samba4.so to samba-dc-libs
- Rebuild in rawhide against new krb5 1.16 and docbook-xml

[4.7.0-12]
- Update to Samba 4.7.0
- resolves: #1493441 - Security fix for CVE-2017-12150 CVE-2017-12151 CVE-2017-12163

[4.7.0-0.11.rc6]
- Update to Samba 4.7.0rc6

[4.7.0-0.11.rc5]
- resolves: #1491137 - dcerpc/__init__.py is not packaged for py3

[4.7.0-0.10.rc5]
- resolves: #1476175 - Create seperate package for bind_dlz module

[4.7.0-0.9.rc5]
- Update to Samba 4.7.0rc5

[4.7.0-0.9.rc3]
- Add printadmin group for printer driver handling

[2:4.7.0-0.8.rc3.2]
- Rebuild with binutils fix for ppc64le (#1475636)

[2:4.7.0-0.8.rc3.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4.7.0-0.8.rc3]
- resolves: #1301002 - Enable avahi support

[4.7.0-0.7.rc3]
- Update to Samba 4.7.0rc3

[4.7.0-0.7.rc1]
- Rename samba-python to python2-samba
- Update build requirement for libcephfs

[4.7.0-0.6.rc1]
- Use Python 2 explicitly for samba-tool and other Python-based tools
- Install samba.service as it is required for the AD DC case

[4.7.0-0.5.rc1]
- Convert more rpc modules to python3
- Explicitly specify Python artifacts in the spec to be able to catch unpackaged ones
- Split 'make test' Python code into separate python2-samba-test/python3-samba-test sub-packages
- Remove embedded python2-dns version, require python{2,3}-dns instead

[4.7.0-0.4.rc1]
- Add python3 support
- Fix %posttrans for libwbclient-devel

[4.7.0-0.3.rc1]
- Do not install conflicting file _ldb_text.py

[4.7.0-0.2.rc1]
- Fix requirement generation for shared libraries

[4.7.0-0.1.rc1]
- Build Samba with Active Directory support!

[4.7.0-0.0.rc1]
- Update to Samba 4.7.0rc1

[4.6.5-0]
- Update to Samba 4.6.5

[2:4.6.4-1.1]
- Perl 5.26 rebuild

[4.6.4-1]
- #resolves: #1451486 - Add source tarball comment

[4.6.4-0]
- Update to Samba 4.6.4
- resolves: #1455050 - Security fix for CVE-2017-7494

[4.6.3-0]
- Update to Samba 4.6.3

[4.6.2-0]
- Update to Samba 4.6.2
- related: #1435156 - Security fix for CVE-2017-2619

[4.6.1-0]
- Update to Samba 4.6.1
- resolves: #1435156 - Security fix for CVE-2017-2619

[4.6.0-4]
- Export arcfour_crypt_blob to Python as samba.crypto.arcfour_encrypt
- Makes possible to run trust to AD in FreeIPA in FIPS mode

[4.6.0-3]
- auth/credentials: Always set the the realm if we set the principal from the ccache
- resolves: #1430761 - credentials_crb5: use gss_acquire_cred for client-side GSSAPI use case

[4.6.0-2]
- resolves: #1430761 - credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case

[4.6.0-1]
- Update to Samba 4.6.0

[4.6.0-0.3.rc4]
- Update to Samba 4.6.0rc4

[4.6.0-0.1.rc3]
- Update to Samba 4.6.0rc3

[4.6.0-0.1.rc2.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[4.6.0-0.1.rc2]
- Update to Samba 4.6.0rc2

[4.6.0-0.1.rc1]
- resolves: #1319098 - Add missing Requires for pre-required packages

[4.6.0-0.1.rc1]
- Update to Samba 4.6.0rc1

[4.5.3-0]
- Update to Samba 4.5.3
- resolves: #1405984 - CVE-2016-2123,CVE-2016-2125 and CVE-2016-2126

[4.5.2-0]
- Update to Samba 4.5.2

[-]
- rebuild (libldb)

[4.5.1-1]
- Fix glfs_realpath allocation in vfs_glusterfs

[4.5.1-0]
- Update to Samba 4.5.1

[4.5.0-3]
- resolves: 1375973 - Fix tevent incompatibility issue

[4.5.0-2]
- Fix smbspool alternatives handling during samba-client uninstall

[4.5.0-1]
- Update to Samba 4.5.0

[4.5.0rc3-0]
- Update to Samba 4.5.0rc3

[4.5.0rc2-0]
- Update to Samba 4.5.0rc2

[4.5.0rc1-0]
- Update to Samba 4.5.0rc1

[2:4.4.5-1.1]
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages

[4.4.5-1]
- Update to Samba 4.4.5
- resolves: #1353504 - CVE-2016-2119

[4.4.4-4]
- resolves: #1348899 - Import of samba.ntacls fails

[4.4.4-3]
- resolves: #1337260 - Small fix to the example smb.conf file

[4.4.4-2]
- Fix resolving trusted domain users on domain member

[4.4.4-1]
- Update to Samba 4.4.4
- resolves: #1343529

[2:4.4.3-2]
- Fix libsystemd patch (#1125086) so that it actually works

[2:4.4.3-1.2]
- Rebuild to drop libsystemd-daemon dependency (#1125086)

[2:4.4.3-1.1]
- Perl 5.24 rebuild

[4.4.3-1]
- Update to Samba 4.4.3
- resolves: #1332178

[4.4.2-1]
- Update to Samba 4.4.2, fix badlock security bug
- resolves: #1326453 - CVE-2015-5370
- resolves: #1326453 - CVE-2016-2110
- resolves: #1326453 - CVE-2016-2111
- resolves: #1326453 - CVE-2016-2112
- resolves: #1326453 - CVE-2016-2113
- resolves: #1326453 - CVE-2016-2114
- resolves: #1326453 - CVE-2016-2115
- resolves: #1326453 - CVE-2016-2118

[4.4.0-1]
- Update to Samba 4.4.0

[4.4.0-0.8.rc5]
- Update to Samba 4.4.0rc5

[4.4.0-0.7.rc4]
- Update to Samba 4.4.0rc4
- resolves: #1315942 - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path

[4.4.0-0.6.rc3]
- Update to Samba 4.4.0rc3

[4.4.0-0.5.rc2]
- Activate multi channel support (switched off by default)

[4.4.0-0.4.rc2]
- More spec file fixes
- resolves: #1306542 - scriptlet failure because of comments

[4.4.0-0.3.rc2]
- More spec file fixes

[4.4.0-0.2.rc2]
- More spec file fixes

[4.4.0-0.1.rc2]
- Update to Samba 4.4.0rc2

[2:4.4.0-0.1.rc1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[4.4.0-0.0.rc1]
- Update to Samba 4.4.0rc1

[4.3.4-1]
- resolves: #1300038 - PANIC: Bad talloc magic value - wrong talloc version used/mixed

[4.3.4-0]
- resolves: #1261230 - Update to Samba 4.3.4

[4.3.3-0]
- Update to Samba 4.3.3
- resolves: #1292069
- CVE-2015-3223 Remote DoS in Samba (AD) LDAP server
- CVE-2015-5252 Insufficient symlink verification in smbd
- CVE-2015-5296 Samba client requesting encryption vulnerable to
                downgrade attack
- CVE-2015-5299 Missing access control check in shadow copy code
- CVE-2015-7540 DoS to AD-DC due to insufficient checking of asn1
                memory allocation

[4.3.2-2]
- revert dependencies to samba-common and -tools

[4.3.2-1]
- resolves: #1261230 - Update to Samba 4.3.2

[4.3.1-3]
- resolves: #1282931 - Fix DCE/RPC bind nak parsing

[4.3.1-2]
- Fix dependencies to samba-common

[4.3.1-1]
- resolves: #1261230 - Update to Samba 4.3.1

[4.3.0-3]
- Use separate lockdir

[4.3.0-2]
- resolves: #1270568 - Samba fails to start after update to 4.3.0

[4.3.0-1]
- resolves: #1088911 - Update to Samba 4.3.0

[4.3.0-0.1rc4]
- Update to Samba 4.3.0rc4

[4.3.0-0.1rc3]
- Update to Samba 4.3.0rc3

[4.2.3-0]
- resolves: #1088911 - Update to Samba 4.2.3

[4.2.2-1]
- resolves: #1227911 - Enable tar support for smbclient
- resolves: #1234908 - Own the /var/lib/samba directory
- Enable hardened build

[2:4.2.2-0.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2:4.2.2-0.1]
- Perl 5.22 rebuild

[4.2.2-0]
- Update to Samba 4.2.2

[4.2.1-8]
- Fixes: #1219832: Samba 4.2 broke FreeIPA trusts to AD
- Remove usage of deprecated API from gnutls

[4.2.1-7]
- Fix LSASD daemon
- resolves: #1217346 - FreeIPA trusts to AD broken due to Samba 4.2 failure to run LSARPC pipe externally

[4.2.1-6]
- Remove samba-common-tools from samba-client package as it brings back Python 2.7

[4.2.1-5]
- Require samba-common-tools in samba package
- Require samba-common-tools in samba-client package
- resolves: #1215631 - /usr/bin/net moved to samba-common-tools but the package is not required by samba

[4.2.1-4]
- Fix systemd library detection (incomplete patch upstream)

[4.2.1-3]
- resolves: #1214973 - Fix libwbclient alternatives link.

[4.2.1-2]
- Add vfs snapper module.

[4.2.1-1]
- Update to Samba 4.2.1
- resolves: #1213373 - Fix DEBUG macro issues in public headers

[4.2.0-3]
- resolves: #1207381 - Fix libsystemd detection.

[4.2.0-2]
- Fix the AD build.
- Create samba-client-libs subpackage.
- Fix multiarch issues by splitting the samba-common package.

[4.2.0-1]
- Update to Samba 4.2.0

[4.2.0-0.5.rc5]
- Update to Samba 4.2.0rc5

[4.2.0-0.4.rc4]
- Update to Samba 4.2.0rc4
- resolves: #1154600 - Install missing samba pam.d configuration file.

[4.2.0-0.6.rc3]
- Fix awk as a dependency (and require gawk)

[4.2.0-0.5.rc3]
- Add dependencies for ctdb.

[4.2.0-0.4.rc3]
- Apply the DEBUG patch

[4.2.0-0.3.rc3]
- Fix issues with conflicting DEBUG macros.

[4.2.0-0.2.rc3]
- Improve dependencies of vfs-glusterfs and vfs-cephfs.
- Remove unused python_libdir.
- Fix malformed changelog entries.

[4.2.0-0.2.rc3]
- Fix ctdb and libcephfs dependencies.

[4.2.0-0.1.rc3]
- Update to Samba 4.2.0rc3
  + Samba provides ctdb packages now.

[4.2.0-0.3.rc2]
- resolves: #1174412 - Build VFS Ceph module.
- resolves: #1169067 - Move libsamba-cluster-support.so to samba-libs package.
- resolves: #1016122 - Move smbpasswd to samba-common package.

[4.2.0-0.2.rc2]
- Use alternatives for libwbclient.
- Add cwrap to BuildRequires.

[4.2.0-0.1.rc2]
- Update to Samba 4.2.0rc2.

[4.1.12-5]
- resolves: #1033595 - Fix segfault in winbind.

[4.1.12-1]
- Update to Samba 4.1.12.

[2:4.1.11-1.4]
- Perl 5.20 mass

[2:4.1.11-1.3]
- Perl 5.20 rebuild

[2:4.1.11-1.2]
- Rebuilt for rpm dependency generator failure (#1131892)

[0:4.1.11-1.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[4.1.11-1]
- Update to upstream Samba 4.1.11 release
- resolves: #1126015 - Fix CVE-2014-3560

[4.1.9-3]
- Update to Samba 4.1.9.
- resolves: #1112251 - Fix CVE-2014-0244 and CVE-2014-3493.

[4.1.8-3]
- Update to Samba 4.1.8.
- resolves: #1102528 - CVE-2014-0178.

[2:4.1.6-3.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[4.1.6-3]
- Add systemd integration to the service daemons.

[4.1.6-2]
- Created a samba-test-libs package.

[4.1.6-1]
- Fix CVE-2013-4496 and CVE-2013-6442.
- Fix installation of pidl.

[4.1.5-1]
- Update to Samba 4.1.5.

[4.1.4-1]
- Update to Samba 4.1.4.

[4.1.3-3]
- resolves: #1042845 - Do not build with libbsd.

[4.1.3-2]
- resolves: #1019469 - Fix winbind debug message NULL pointer derreference.

[4.1.3-1]
- Update to Samba 4.1.3.
- resolves: #1039454 - CVE-2013-4408.
- resolves: #1039500 - CVE-2012-6150.

[4.1.2-1]
- Update to Samba 4.1.2.

[4.1.1-3]
- resolves: #948509 - Fix manpage correctness.

[4.1.1-2]
- related: #884169 - Fix strict aliasing warnings.

[4.1.1-1]
- resolves: #1024544 - Fix CVE-2013-4475.
- Update to Samba 4.1.1.

[4.1.0-5]
- related: #884169 - Fix the upgrade path.

[4.1.0-4]
- related: #884169 - Add direct dependency to samba-libs in the
                     glusterfs package.
- resolves: #996567 - Fix userPrincipalName composition.
- related: #884169 - Fix memset call with zero length in in ntdb.

[4.1.0-3]
- resolves: #1020329 - Build glusterfs VFS plguin.

[4.1.0-2]
- resolves: #1018856 - Fix installation of pam_winbind after upgrade.
- related: #1010722 - Split out a samba-winbind-modules package.
- related: #985609

[4.1.0-1]
- related: #985609 - Update to Samba 4.1.0.

[2:4.1.0-0.8]
- related: #985609 - Update to Samba 4.1.0rc4.
- resolves: #1010722 - Split out a samba-winbind-modules package.

[2:4.1.0-0.7]
- related: #985609 - Update to Samba 4.1.0rc3.
- resolves: #1005422 - Add support for KEYRING ccache type in pam_winbindd.

[2:4.1.0-0.6]
- resolves: #717484 - Enable profiling data support.

[2:4.1.0-0.5]
- resolves: #996160 - Fix winbind with trusted domains.

[2:4.1.0-0.4]
- resolves: #996160 - Fix winbind nbt name lookup segfault.

[2:4.1.0-0.3]
- related: #985609 - Update to Samba 4.1.0rc2.

[2:4.1.0-0.2.rc1.1]
- Perl 5.18 rebuild

[2:4.1.0-0.2]
- resolves: #985985 - Fix file conflict between samba and wine.
- resolves: #985107 - Add support for new default location for Kerberos
                      credential caches.

[2:4.1.0-0.1.rc1.1]
- Perl 5.18 rebuild

[2:4.1.0-0.1]
- Update to Samba 4.1.0rc1.

[2:4.0.7-2]
- resolves: #972692 - Build with PIE and full RELRO.
- resolves: #884169 - Add explicit dependencies suggested by rpmdiff.
- resolves: #981033 - Local user's krb5cc deleted by winbind.
- resolves: #984331 - Fix samba-common tmpfiles configuration file in wrong
                      directory.

[2:4.0.7-1]
- Update to Samba 4.0.7.

[2:4.0.6-3]
- Add UPN enumeration to passdb internal API (bso #9779).

[2:4.0.6-2]
- resolves: #966130 - Fix build with MIT Kerberos.
- List vfs modules in spec file.

[2:4.0.6-1]
- Update to Samba 4.0.6.
- Remove SWAT.

[2:4.0.5-1]
- Update to Samba 4.0.5.
- Add UPN enumeration to passdb internal API (bso #9779).
- resolves: #928947 - samba-doc is obsolete now.
- resolves: #948606 - LogRotate should be optional, and not a hard 'Requires'.

[2:4.0.4-3]
- resolves: #919405 - Fix and improve large_readx handling for broken clients.
- resolves: #924525 - Don't use waf caching.

[2:4.0.4-2]
- resolves: #923765 - Improve packaging of README files.

[2:4.0.4-1]
- Update to Samba 4.0.4.

[2:4.0.3-4]
- resolves: #919333 - Create /run/samba too.

[2:4.0.3-3]
- Fix the cache dir to be /var/lib/samba to support upgrades.

[2:4.0.3-2]
- resolves: #907915 - libreplace.so =&gt; not found

[2:4.0.3-1]
- Update to Samba 4.0.3.
- resolves: #907544 - Add unowned directory /usr/lib64/samba.
- resolves: #906517 - Fix pidl code generation with gcc 4.8.
- resolves: #908353 - Fix passdb backend ldapsam as module.

[2:4.0.2-1]
- Update to Samba 4.0.2.
- Fixes CVE-2013-0213.
- Fixes CVE-2013-0214.
- resolves: #906002
- resolves: #905700
- resolves: #905704
- Fix conn-&gt;share_access which is reset between user switches.
- resolves: #903806
- Add missing example and make sure we don't introduce perl dependencies.
- resolves: #639470

[2:4.0.1-1]
- Update to Samba 4.0.1.
- Fixes CVE-2013-0172.

[2:4.0.0-174]
- Fix typo in winbind-krb-locator post uninstall script.

[2:4.0.0-173]
- Update to Samba 4.0.0.

[2:4.0.0-171.rc6]
- Fix typo in winbind-krb-locator post uninstall script.

[2:4.0.0-170.rc6]
- Update to Samba 4.0.0rc6.
- Add /etc/pam.d/samba for swat to work correctly.
- resolves #882700

[2:4.0.0-169.rc5]
- Make sure ncacn_ip_tcp client code looks for NBT_NAME_SERVER name types.

[2:4.0.0-168.rc5]
- Reduce dependencies of samba-devel and create samba-test-devel package.

[2:4.0.0-167.rc5]
- Use workaround for winbind default domain only when set.
- Build with old ctdb support.

[2:4.0.0-166.rc5]
- Update to Samba 4.0.0rc5.

[2:4.0.0-165.rc4]
- Fix library dependencies of libnetapi.

[2:4.0.0-164.rc4]
- resolves: #872818 - Fix perl dependencies.

[2:4.0.0-163.rc4]
- Update to Samba 4.0.0rc4.

[2:4.0.0-162.rc3]
- resolves: #870630 - Fix scriptlets interpeting a comment as argument.

[2:4.0.0-161.rc3]
- Add missing Requries for python modules.
- Add NetworkManager dispatcher script for winbind.

[2:4.0.0-160.rc3]
- resolves: #867893 - Move /var/log/samba to samba-common package for
                      winbind which requires it.

[2:4.0.0-159.rc3]
- Compile default auth methods into smbd.

[2:4.0.0-158.rc3]
- Move pam_winbind.conf and the manpages to the right package.

[2:4.0.0-157.rc3]
* resolves: #866959 - Build auth_builtin as static module.

[2:4.0.0-156.rc3]
- Update systemd Requires to reflect latest packaging guidelines.

[2:4.0.0-155.rc3]
- Add back the AES patches which didn't make it in rc3.

[2:4.0.0-154.rc3]
- Update to 4.0.0rc3.
- resolves: #805562 - Unable to share print queues.
- resolves: #863388 - Unable to reload smbd configuration with systemctl.

[2:4.0.0-153.rc2]
- Use alternatives to configure winbind_krb5_locator.so
- Fix Requires for winbind.

[2:4.0.0-152.rc2]
- Add kerberos AES support.
- Fix printing initialization.

[2:4.0.0-151.rc2]
- Update to 4.0.0rc2.

[2:4.0.0-150.rc1]
- Fix Obsoletes/Provides for update from samba4.
- Bump release number to be bigger than samba4.

[2:4.0.0-96.rc1]
- Package smbprint again.

[2:4.0.0-95.rc1]
- Update to 4.0.0rc1.

[2:3.6.7-94.2]
- Update to 3.6.7

[2:3.6.6-93.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[2:3.6.6-93]
- Fix printing tdb upgrade for 3.6.6
- resolves: #841609

[2:3.6.6-92]
- Call ldconfig at libwbclient and -winbind-clients post(un)install time.
- Fix empty localization files, use %find_lang to find and %lang-mark them.
- Escape macros in %changelog.
- Fix source tarball URL.

[2:3.6.6-91]
- Update to 3.6.6

[2:3.6.5-90]
- Fix ldonfig.
- Require systemd for samba-common package.
- resolves: #829197

[2:3.6.5-89]
- Fix usrmove paths.
- resolves: #829197

[2:3.6.5-88]
- Move tmpfiles.d config to common package as it is needed for smbd and
  winbind.
- Make sure tmpfiles get created after installation.

[2:3.6.5-87]
- Correctly use system iniparser library

[2:3.6.5-86]
- Bump Epoch to fix a problem with a Samba4 update in testing.

[1:3.6.5-85]
- Security Release, fixes CVE-2012-2111
- resolves: #817551

[1:3.6.4-84]
- Fix creation of /var/run/samba.
- resolves: #751625

[1:3.6.4-83]
- Avoid private krb5_locate_kdc usage
- resolves: #754783

[1:3.6.4-82]
- Update to 3.6.4
- Fixes CVE-2012-1182

[1:3.6.3-81]
- Fix provides for of libwclient-devel for samba-winbind-devel.

[1:3.6.3-80]
- Add commented out 'max protocol' to the default config.

[1:3.6.3-79]
- Create a libwbclient package.
- Replace winbind-devel with libwbclient-devel package.

[1:3.6.3-78]
- Update to 3.6.3
- Fixes CVE-2012-0817

[1:3.6.1-77.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[1:3.6.1-77]
- Fix winbind cache upgrade.
- resolves: #760137

[1:3.6.1-76]
- Fix piddir to match with systemd files.
- Fix crash bug in the debug system.
- resolves: #754525

[1:3.6.1-75]
- Fix systemd dependencies
- resolves: #751397

[1:3.6.1-74]
- Update to 3.6.1

[1:3.6.0-73]
- Fix nmbd startup
- resolves: #741630

[1:3.6.0-72]
- convert to systemd
- restore epoch from f15

[3.6.0-71]
- Update to 3.6.0 final

[3.6.0rc3-70]
- Update to 3.6.0rc3

[3.6.0rc2-69]
- Update to 3.6.0rc2

[3.6.0rc1-68]
- Update to 3.6.0rc1

[3.6.0pre3-67]
- Update to 3.6.0pre3

[3.6.0pre2-66]
- Update to 3.6.0pre2

[3.6.0pre1-65]
- Enable quota support

[0:3.6.0-64pre1.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[3.6.0pre1-64]
- Add %ghost entry for /var/run using tmpfs
- resolves: #656685

[3.6.0pre1-63]
- Put winbind krb5 locator plugin into a separate rpm
- resolves: #627181

[3.6.0pre1-62]
- Update to 3.6.0pre1

[3.5.4-61]
- Update to 3.5.4

[3.5.3-60]
- Update to 3.5.3
- Make sure nmb and smb initscripts return LSB compliant return codes
- Fix winbind over ipv6

[3.5.2-59]
- Update to 3.5.2

[3.5.1-58]
- Security update to 3.5.1
- Fixes CVE-2010-0728

[3.5.0-57]
- Remove cifs.upcall and mount.cifs entirely

[3.5.0-56]
- Update to 3.5.0

[3.5.0rc3-55]
- Update to 3.5.0rc3

[3.5.0rc2-54]
- Update to 3.5.0rc2

[3.5.0rc1-53]
- separate out CIFS tools into cifs-utils package

[3.5.0rc1-52]
- Update to 3.5.0rc1

[3.5.0pre2-51]
- Update to 3.5.0pre2
- Remove umount.cifs

[3.4.3-49]
- Various updates to inline documentation in default smb.conf file
- resolves: #483703

[3.4.3-48]
- Update to 3.4.3

[3.4.2-47]
- Spec file cleanup
- Fix sources upstream location
- Remove conditionals to build talloc and tdb, now they are completely indepent
  packages in Fedora
- Add defattr() where missing
- Turn all tabs into 4 spaces
- Remove unused migration script
- Split winbind-clients out of main winbind package to avoid multilib to include
  huge packages for no good reason

[3.4.2-0.46]
- Update to 3.4.2
- Security Release, fixes CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906

[3.4.1-0.45]
- Use password-auth common PAM configuration instead of system-auth

[3.4.1-0.44]
- Update to 3.4.1

[3.4.0-0.43]
- Fix cli_read()
- resolves: #516165

[3.4.0-0.42]
- Fix required talloc version number
- resolves: #516086

[0:3.4.0-0.41.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[3.4.0-0.41]
- Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
- Specify required talloc and tdb version for BuildRequires

[3.4.0-0.40]
- Update to 3.4.0

[3.4.0rc1-0.39]
- Update to 3.4.0rc1

[3.4.0pre2-0.38]
- Update to 3.4.0pre2

[3.4.0pre1-0.37]
- Update to 3.4.0pre1

[3.3.4-0.36]
- Update to 3.3.4

[3.3.3-0.35]
- Enable build of idmap_tdb2 for clustered setups

[3.3.3-0.34]
- Update to 3.3.3

[3.3.2-0.33]
- Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
  configuration
- Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
  startup, causing your own machine not to show up in the network for 5 minutes
  if it was the only client in that workgroup (fix committed upstream)

[3.3.2-0.31]
- Update to 3.3.2
- resolves: #489547

[3.3.1-0.30]
- Add libcap-devel to requires list (resolves: #488559)

[3.3.1-0.29]
- Make the talloc and ldb packages optionsl and disable their build within
  the samba3 package, they are now built as part of the samba4 package
  until they will both be released as independent packages.

[3.3.1-0.28]
- Enable cluster support

[3.3.1-0.27]
- Update to 3.3.1

[3.3.0-0.26]
- Rename ldb* tools to ldb3* to avoid conflicts with newer ldb releases

[3.3.0-0.25]
- Update to 3.3.0 final
- Add upstream fix for ldap connections to AD (Bug #6073)
- Remove bogus perl dependencies (resolves: #473051)

[3.3.0-0rc1.24]
- Update to 3.3.0rc1

[3.2.5-0.23]
- Security Release, fixes CVE-2008-4314

[3.2.4-0.22]
- Update to 3.2.4
- resolves: #456889
- move cifs.upcall to /usr/sbin

[3.2.3-0.21]
- Security fix for CVE-2008-3789

[3.2.2-0.20]
- Update to 3.2.2

[3.2.1-0.19]
- Add fix for CUPS problem, fixes bug #453951

[3.2.1-0.18]
- Update to 3.2.1

[3.2.0-2.17]
- Update to 3.2.0 final
- resolves: #452622

[3.2.0-1.rc2.16]
- Update to 3.2.0rc2
- resolves: #449522
- resolves: #448107

[3.2.0-1.rc1.15]
- Fix security=server
- resolves: #449038, #449039

[3.2.0-1.rc1.14]
- Add fix for CVE-2008-1105
- resolves: #446724

[3.2.0-1.rc1.13]
- Update to 3.2.0rc1

[3.2.0-1.pre3.12]
- make it possible to print against Vista and XP SP3 as servers
- resolves: #439154

[3.2.0-1.pre3.11]
- Add 'net ads join createcomputer=ou1/ou2/ou3' fix (BZO #5465)

[3.2.0-1.pre3.10]
- Add smbclient fix (BZO #5452)

[3.2.0-1.pre3.9]
- Update to 3.2.0pre3

[3.2.0-1.pre2.8]
- Add fixes for libsmbclient and support for r/o relocations

[3.2.0-1.pre2.7]
- Fix libnetconf, libnetapi and msrpc DSSETUP call

[3.2.0-1.pre2.6]
- Create separate packages for samba-winbind and samba-winbind-devel
- Add cifs.spnego helper

[3.2.0-1.pre2.3]
- Update to 3.2.0pre2
- Add talloc and tdb lib and devel packages
- Add domainjoin-gui package

[3.2.0-0.pre1.3]
- Try to fix GCC 4.3 build
- Add --with-dnsupdate flag and also make sure other flags are required just to
  be sure the features are included without relying on autodetection to be
  successful

[0:3.2.0-1.pre1.2]
- Autorebuild for GCC 4.3

[3.2.0-0.pre1.2]
- Rebuild for openldap bump

[3.2.0-0.pre1.1.fc9]
- 32/64bit padding fix (affects multilib installations)

[3.2.0-0.pre1.fc9]
- New major relase, minor switched from 0 to 2
- License change, the code is now GPLv3+
- Numerous improvements and bugfixes included
- package libsmbsharemodes too
- remove smbldap-tools as they are already packaged separately in Fedora
- Fix bug 245506

[3.0.26a-1.fc8]
- rebuild with AD DNS Update support

[3.0.26a-0.fc8]
- upgrade to the latest upstream realease
- includes security fixes released today in 3.0.26

[3.0.25c-4.fc8]
- add fix reported upstream for heavy idmap_ldap memleak

[3.0.25c-3.fc8]
- fix a few places were 'open' is used an interfere with the new glibc

[3.0.25c-2.fc8]
- remove old source
- add patch to fix samba bugzilla 4772

[3.0.25c-0.fc8]
- update to 3.0.25c

[3.0.25b-3.fc8]
- handle cases defined in #243766

[3.0.25b-2.fc8]
- update to 3.0.25b
- better error codes for init scripts: #244823

* Tue May 29 2007 Gunther Deschner &lt;gdeschner@redhat.com&gt;
- fix pam_smbpass patch.

* Fri May 25 2007 Simo Sorce &lt;ssorce@redhat.com&gt;
- update to 3.0.25a as it contains many fixes
- add a fix for pam_smbpass made by Gunther but committed upstream after 3.0.25a was cut.

* Mon May 14 2007 Simo Sorce &lt;ssorce@redhat.com&gt;
- final 3.0.25
- includes security fixes for CVE-2007-2444,CVE-2007-2446,CVE-2007-2447

* Mon Apr 30 2007 Gunther Deschner &lt;gdeschner@redhat.com&gt;
- move to 3.0.25rc3

* Thu Apr 19 2007 Simo Sorce &lt;ssorce@redhat.com&gt;
- fixes in the spec file
- moved to 3.0.25rc1
- addedd patches (merged upstream so they will be removed in 3.0.25rc2)

[3.0.24-12.fc7]
- fixes in smb.conf
- advice in smb.conf to put scripts in /var/lib/samba/scripts
- create /var/lib/samba/scripts so that selinux can be happy
- fix Vista problems with msdfs errors

[3.0.24-11.fc7]
- enable PAM and NSS dlopen checks during build
- fix unresolved symbols in libnss_wins.so (bug #198230)

[3.0.24-10.fc7]
- set passdb backend = tdbsam as default in smb.conf
- remove samba-docs dependency from swat, that was a mistake
- put back COPYING and other files in samba-common
- put examples in samba not in samba-docs
- leave only stuff under docs/ in samba-doc

[3.0.24-9.fc7]
- integrate most of merge review proposed changes (bug #226387)
- remove libsmbclient-devel-static and simply stop shipping the
  static version of smbclient as it seem this is deprecated and
  actively discouraged

[3.0.24-8.fc7]
- fix for bug #176649

* Mon Mar 26 2007 Simo Sorce &lt;ssorce@redhat.com&gt;
- remove patch for bug 106483 as it introduces a new bug that prevents
  the use of a credentials file with the smbclient tar command
- move the samba private dir from being the same as the config dir
  (/etc/samba) to /var/lib/samba/private

[3.0.24-7.fc7]
- make winbindd start earlier in the init process, at the same time
  ypbind is usually started as well
- add a sepoarate init script for nmbd called nmb, we need to be able
  to restart nmbd without dropping al smbd connections unnecessarily

* Fri Mar 23 2007 Simo Sorce &lt;ssorce@redhat.com&gt;
- add samba.schema to /etc/openldap/schema

* Thu Mar 22 2007 Florian La Roche &lt;laroche@redhat.com&gt;
- adjust the Requires: for the scripts, add 'chkconfig --add smb'

[3.0.24-6.fc7]
- do not put comments inline on smb.conf options, they may be read
  as part of the value (for example log files names)

[3.0.24-5.fc7]
- actually use the correct samba.pamd file not the old samba.pamd.stack file
- fix logifles and use upstream convention of log.* instead of our old *.log
  Winbindd creates its own log.* files anyway so we will be more consistent
- install our own (enhanced) default smb.conf file
- Fix pam_winbind acct_mgmt PAM result code (prevented local users from
  logging in). Fixed by Guenther.
- move some files from samba to samba-common as they are used with winbindd
  as well

[3.0.24-4.fc7]
- fix arch macro which reported Vista to Samba clients.

[3.0.24-3.fc7]
- Directories reorg, tdb files must go to /var/lib, not
  to /var/cache, add migration script in %post common
- Split out libsmbclient, devel and doc packages
- Remove libmsrpc.[h|so] for now as they are not really usable
- Remove kill -HUP from rotate, samba use -HUP for other things
  noit to reopen logs

[3.0.24-2.fc7]
- New upstream release
- Fix packaging issue wrt idmap modules used only by smbd
- Addedd Vista Patchset for compatibility with Windows Vista
- Change default of 'msdfs root', it seem to cause problems with
  some applications and it has been proposed to change it for
  3.0.25 upstream

[3.0.23c-2]
- New upstream release.

[3.0.23b-2]
- New upstream release.

[3.0.23a-3]
- Fix the -logfiles patch to close
  bz#199607 Samba compiled with wrong log path.
  bz#199206 smb.conf has incorrect log file path

[3.0.23a-2]
- Upgrade to new upstream 3.0.23a
- include upstream samr_alias patch

[3.0.23-2]
- New upstream release.
- Use modified filter-requires-samba.sh from packaging/RHEL/setup/
  to get rid of bogus dependency on perl(Unicode::MapUTF8)
- Update the -logfiles and -smb.conf patches to work with 3.0.23

[3.0.23-0.RC3]
- New upstream RC release.
- Update the -logfiles, and -passwd patches for
  3.0.23rc3
- Include the change to smb.init from Bastien Nocera &lt;bnocera@redhat.com&gt;)
  to close
  bz#182560 Wrong retval for initscript when smbd is dead
- Update this spec file to build with 3.0.23rc3
- Remove the -install.mount.smbfs patch, since we don't install
  mount.smbfs any more.

[2.0.21c-3]
- rebuilt with new gnutls

[2.0.21c-2]
- New upstream version.

[3.0.21b-2]
- New upstream version.
- Since the rawhide kernel has dropped support for smbfs, remove smbmount
  and smbumount.  Users should use mount.cifs instead.
- Upgrade to 3.0.21b

[0:3.0.20b-2.1.1]
- bump again for double-long bug on ppc(64)

* Fri Dec 09 2005 Jesse Keating &lt;jkeating@redhat.com&gt;
- rebuilt

[3.0.20b-2]
- turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
  been depricated in 2.3.11, but which don't have well-documented
  replacements (ldap_simple_bind_s(), for example).
- Upgrade to 3.0.20b, which includes all the previous upstream patches.
- Updated the -warnings patch for 3.0.20a.
- Include  --with-shared-modules=idmap_ad,idmap_rid to close
  bz#156810 --with-shared-modules=idmap_ad,idmap_rid
- Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
  bz#170259 pam_stack is deprecated

[3.0.20-3]
- epochs from deps, req exact release
- rebuild against new openssl

[3.0.20-2]
- New upstream release
  Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
    -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
  This obsoletes the -pie and -delim patches
  the -warning and -gcc4 patches are obsolete too
  The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
  Also, the -quoting patch was implemented differently upstream
  There is now a umount.cifs executable and manpage
  We run autogen.sh as part of the build phase
  The testprns command is now gone
  libsmbclient now has a man page
- Include -bug106483 patch to close
  bz#106483 smbclient: -N negates the provided password, despite documentation
- Added the -warnings patch to quiet some compiler warnings.
- Removed many obsolete patches from CVS.

[3.0.14a-2]
- New upstream release.
- the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
  winbind_find_dc_v2 patches are now obsolete.

[3.0.13-2]
- New upstream release
- add my -quoting patch, to fix swat with strings that contain
  html meta-characters, and to use correct quote characters in
  lists, closing bz#134310
- include the upstream winbindd_2k3sp1 patch
- include the -smbclient patch.
- include the -hang patch from upstream.

* Thu Mar 24 2005 Florian La Roche &lt;laroche@redhat.com&gt;
- add a 'exit 0' to the postun of the main samba package

[3.0.11-5]
- rebuild with openssl-0.9.7e

[3.0.11-4]
- Use the updated filter-requires-samba.sh file, so we don't accidentally
  pick up a dependency on perl(Crypt::SmbHash)

[3.0.11-3]
- add -gcc4 patch to compile with gcc 4.
- remove the now obsolete -smbclient-kerberos.patch
- Include four upstream patches from
  http://samba.org/~jerry/patches/post-3.0.11/
  (Slightly modified the winbind_find_dc_v2 patch to apply easily with
  rpmbuild).

[3.0.11-2]
- include -smbspool patch to close bz#104136

[3.0.10-4]
- Update the -man patch to fix ntlm_auth.1 too.
- Move pam_smbpass.so to the -common package, so both the 32
  and 64-bit versions will be installed on multiarch platforms.
  This closes bz#143617
- Added new -delim patch to fix mount.cifs so it can accept
  passwords with commas in them (via environment or credentials
  file) to close bz#144198

[3.0.10-3]
- Rebuilt for new readline.

[3.0.10-2]
- New upstream release that closes CAN-2004-1154  bz#142544
- Include the -64bit patch from Nalin.  This closes bz#142873
- Update the -logfiles patch to work with 3.0.10
- Create /var/run/winbindd and make it part of the -common rpm to close
  bz#142242

[3.0.9-2]
- New upstream release.  This obsoletes the -secret patch.
  Include my changetrustpw patch to make 'net ads changetrustpw' stop
  aborting.  This closes #134694
- Remove obsolete triggers for ancient samba versions.
- Move /var/log/samba to the -common rpm.  This closes #76628
- Remove the hack needed to get around the bad docs files in the
  3.0.8 tarball.
- Change the comment in winbind.init to point at the correct pidfile.
  This closes #76641

[3.0.8-4]
- fix unresolved symbols in libsmbclient which caused applications
  such as KDE's konqueror to fail when accessing smb:// URLs. #139894

[3.0.8-3.1]
- Rescue the install.mount.smbfs patch from Juanjo Villaplana
  (villapla@si.uji.es) to prevent building the srpm from trashing your
  installed /usr/bin/smbmount

[3.0.8-3]
- Include the corrected docs tarball, and use it instead of the
  obsolete docs from the upstream 3.0.8 tarball.
- Update the logfiles patch to work with the updated docs.

[3.0.8-2]
- New upstream version fixes CAN-2004-0930.  This obsoletes the
  disable-sendfile, salt, signing-shortkey and fqdn patches.
- Add my &lt;fenlason@redhat.com&gt; ugly non-ascii-domain patch.
- Updated the pie patch for 3.0.8.
- Updated the logfiles patch for 3.0.8.

[3.0.8-0.pre2]
- New upstream version
- Add Nalin's signing-shortkey patch.

[3.0.8-0.pre1.3]
- disable the -salt patch, because it causes undefined references in
  libsmbclient that prevent gnome-vfs from building.

[3.0.8-0.pre1.2]
- Re-enable the x_fclose patch that was accidentally disabled
  in 3.0.8-0.pre1.1.  This closes #135832
- include Nalin's -fqdn and -salt patches.

[3.0.8-0.pre1.1]
- Include disable-sendfile patch to default 'use sendfile' to 'no'.
  This closes #132779

* Wed Oct 06 2004 Jay Fenlason &lt;fenlason@redhat.com&gt;
- Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
  smbmnt to work with 32-bit uids.

[3.0.8-0.pre1]
- new upstream release.  This obsoletes the ldapsam_compat patches.

[3.0.7-4]
- Update docs section to not carryover the docs/manpages directory
  This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
  /usr/share/doc/samba-3.0.7/*
- Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
  to correctly create libsmbclient.so.0 and to use %_initrddir instead
  of rolling our own.  This closes #132642
- Add patch to default 'use sendfile' to no, since sendfile appears to
  be broken
- Add patch from Volker Lendecke &lt;vl@samba.org&gt; to help make
  ldapsam_compat work again.
- Add patch from 'Vince Brimhall' &lt;vbrimhall@novell.com&gt; for ldapsam_compat
  These two patches close bugzilla #132169

[3.0.7-3]
- Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
  This obsoletes the 3.0.6-schema patch.
- Update BuildRequires line to include openldap-devel openssl-devel
  and cups-devel

[3.0.6-3]
- New upstream version.
- Include post 3.0.6 patch from 'Gerald (Jerry) Carter' &lt;jerry@samba.org&gt;
  to fix a duplicate in the LDAP schema.
- Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
  to allow correct timestamp handling on 64-bit platforms and fix #126109.
- reenable the -pie patch.  Samba is too widely used, and too vulnerable
  to potential security holes to disable an important security feature
  like -pie.  The correct fix is to have the toolchain not create broken
  executables when programs compiled -pie are stripped.
- Remove obsolete patches.
- Modify this spec file to put libsmbclient.{a,so} in the right place on
  x86_64 machines.

[3.0.5-3]
- Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
- resulted in executables getting corrupt stacks, causing smbmnt to
- get a SIGBUS in the mount() call (bug 127420).

[3.0.5-2]
- Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
  security fix.
- Include the 3.0.4-backport patch from the 3E branch.  This restores
  some of the 3.0.5pre1 and 3.0.5rc1 functionality.

[3.0.5-0.pre1.1]
- Backport base64_decode patche to close CAN-2004-0500
- Backport hash patch to close CAN-2004-0686
- use_authtok patch from Nalin Dahyabhai &lt;nalin@redhat.com&gt;
- smbclient-kerberos patch from Alexander Larsson &lt;alexl@redhat.com&gt;
- passwd patch uses '*' instead of 'x' for 'hashed' passwords for
  accounts created by winbind.  'x' means 'password is in /etc/shadow' to
  brain-damaged pam_unix module.

[3.0.5.0pre1.0]
- New upstream version
- use % { SOURCE1 } instead of a hardcoded path
- include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
  https://bugzilla.samba.org/show_bug.cgi?id=1315
  to make winbindd work against Windows versions that do not have
  128 bit encryption enabled.
- Moved %{_bindir}/net to the -common package, so that folks who just
  want to use winbind, etc don't have to install -client in order to
  'net join' their domain.
- New upstream version obsoletes the patches added in 3.0.3-5
- Remove smbgetrc.5 man page, since we don't ship smbget.

* Tue Jun 15 2004 Elliot Lee &lt;sopwith@redhat.com&gt;
- rebuilt

[3.0.3-5]
- Patch to allow password changes from machines patched with
  Microsoft hotfix MS04-011.
- Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
  and https://bugzilla.samba.org/show_bug.cgi?id=1309

[3.0.3-4]
- Samba 3.0.3 released.

[3.0.3-3.rc1]
- New upstream version
- updated spec file to make libsmbclient.so executable.  This closes
  bugzilla #121356

[3.0.3-2.pre2]
- New upstream version 
- Updated configure line to remove --with-fhs and to explicitly set all
  the directories that --with-fhs was setting.  We were overriding most of
  them anyway.  This closes #118598

[3.0.3-1.pre1]
- New upstream version.
- Updated -pie and -logfiles patches for 3.0.3pre1
- add krb5-devel to buildrequires, fixes #116560
- Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
  'service smb status'.  This fixes #116559

* Tue Mar 02 2004 Elliot Lee &lt;sopwith@redhat.com&gt;
- rebuilt

[3.0.2a-1]
- Upgrade to 3.0.2a

[3.0.2-7]
- fix ownership in -common package

* Fri Feb 13 2004 Elliot Lee &lt;sopwith@redhat.com&gt;
- rebuilt

* Fri Feb 13 2004 Jay Fenlason &lt;fenlason@redhat.com&gt;
- Change all requires lines to list an explicit epoch.  Closes #102715
- Add an explicit Epoch so that %{epoch} is defined.

[3.0.2-5]
- New upstream version: 3.0.2 final includes security fix for #114995
  (CAN-2004-0082)
- Edit postun script for the -common package to restart winbind when
  appropriate.  Fixes bugzilla #114051.

[3.0.2-3rc2]
- add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
- Upgrade to new upstream version
- build mount.cifs for the new cifs filesystem in the 2.6 kernel.

[3.0.2-1rc1]
- Upgrade to new upstream version

[3.0.1-1]
- Update to 3.0.1
- Removed testparm patch as it's already merged
- Removed Samba.7* man pages
- Fixed .buildroot patch
- Fixed .pie patch
- Added new /usr/bin/tdbdump file

[3.0.0-15]
- New 3.0.0 final release
- merge nmbd-netbiosname and testparm patches from 3E branch
- updated the -logfiles patch to work against 3.0.0
- updated the pie patch
- update the VERSION file during build
- use make -j if avaliable
- merge the winbindd_privileged change from 3E
- merge the 'rm /usr/lib' patch that allows Samba to build on 64-bit
  platforms despite the broken Makefile

* Mon Aug 18 2003 Jay Fenlason &lt;fenlason@redhat.com&gt;
- Merge from samba-3E-branch after samba-3.0.0rc1 was released

[3.0.0-3beta3]
- Merge from 3.0.0-2beta3.3E
- (Correct log file names (#100981).)
- (Fix pidfile directory in samab.log)
- (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
- (Move libsmbclient to the -common package (#99449))

[2.2.8a-4]
- rebuild

* Wed Jun 04 2003 Elliot Lee &lt;sopwith@redhat.com&gt;
- rebuilt

[2.2.8a-2]
- add libsmbclient.so for gnome-vfs-extras
- Edit specfile to specify /var/run for pid files
- Move /tmp/.winbindd/socket to /var/run/winbindd/socket

* Wed May 14 2003 Florian La Roche &lt;Florian.LaRoche@redhat.de&gt;
- add proper ldconfig calls

[2.2.8a-1]
- upgrade to 2.2.8a
- remove old .md5 files
- add 'pid directory = /var/run' to the smb.conf file.  Fixes #88495
- Patch from jra@dp.samba.org to fix a delete-on-close regression

[2.2.8-0]
- Upgrade to 2.2.8
- removed commented out patches.
- removed old patches and .md5 files from the repository.
- remove duplicate /sbin/chkconfig --del winbind which causes
  warnings when removing samba.
- Fixed minor bug in smbprint that causes it to fail when called with
  more than 10 parameters: the accounting file (and spool directory
  derived from it) were being set wrong due to missing {}.  This closes
  bug #86473.
- updated smb.conf patch, includes new defaults to close bug #84822.

* Mon Feb 24 2003 Elliot Lee &lt;sopwith@redhat.com&gt;
- rebuilt

[2.2.7a-5]
- remove swat.desktop file

[2.2.7a-4]
- relink libnss_wins.so with SHLD='%{__cc} -lnsl' to force libnss_wins.so to
  link with libnsl, avoiding unresolved symbol errors on functions in libnsl

[2.2.7a-3]
- edited spec file to put .so files in the correct directories
  on 64-bit platforms that have 32-bit compatability issues
  (sparc64, x86_64, etc).  This fixes bugzilla #83782.
- Added samba-2.2.7a-error.patch from twaugh.  This fixes
  bugzilla #82454.

* Wed Jan 22 2003 Tim Powers &lt;timp@redhat.com&gt;
- rebuilt

[2.2.7a-1]
- Update to 2.2.7a
- Change default printing system to CUPS
- Turn on pam_smbpass
- Turn on msdfs

[2.2.7-5]
- use internal dep generator.

[2.2.7-4]
- don't use rpms internal dep generator

[2.2.7-3]
- Fix missing doc files.
- Fix multilib issues

[2.2.7-2]
- update to 2.2.7
- add patch for LFS in smbclient (&lt;tcallawa@redhat.com&gt;)

[2.2.5-10]
- logrotate fixes (#65007)

[2.2.5-9]
- /usr/lib was used in place of %{_libdir} in three locations (#72554)

[2.2.5-8]
- Initscript fix (#70720)

[2.2.5-7]
- Enable VFS support and compile the 'recycling' module (#69796)
- more selective includes of the examples dir

[2.2.5-6]
- Fix the lpq parser for better handling of LPRng systems (#69352)

[2.2.5-5]
- desktop file fixes (#69505)

[2.2.5-4]
- Enable ACLs

[2.2.5-3]
- Make it not depend on Net::LDAP - those are doc files and examples

* Fri Jun 21 2002 Tim Powers &lt;timp@redhat.com&gt;
- automated rebuild

[2.2.5-1]
- 2.2.5

[2.2.4-5]
- Move the post/preun of winbind into the -common subpackage,
  where the script is (#66128)

[2.2.4-4]
- Fix pidfile locations so it runs properly again (2.2.4
  added a new directtive - #65007)

* Thu May 23 2002 Tim Powers &lt;timp@redhat.com&gt;
- automated rebuild

[2.2.4-2]
- Fix #64804

[2.2.4-1]
- 2.2.4
- Removed some zero-length and CVS internal files
- Make it build

[2.2.3a-6]
- Don't use /etc/samba.d in smbadduser, it should be /etc/samba

[2.2.3a-5]
- Add libsmbclient.a w/headerfile for KDE (#62202)

[2.2.3a-4]
- Make the logrotate script look the correct place for the pid files

[2.2.3a-3]
- include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
  (patch posted to samba-list by Ilia Chipitsine)

[2.2.3a-2]
- Rebuild

[2.2.3a-1]
- 2.2.3a

[2.2.3-1]
- 2.2.3

[2.2.2-8]
- New pam configuration file for samba

[2.2.2-7]
- Enable PAM session controll and password sync

[2.2.2-6]
- Move winbind files to samba-common. Add separate initscript for
  winbind
- Fixes for winbind - protect global variables with mutex, use
  more secure getenv

[2.2.2-5]
- Teach smbadduser about 'getent passwd'
- Fix more pid-file references
- Add (conditional) winbindd startup to the initscript, configured in
  /etc/sysconfig/samba

[2.2.2-4]
- Fix pid-file reference in logrotate script
- include pam and nss modules for winbind

[2.2.2-3]
- Add '--with-utmp' to configure options (#55372)
- Include winbind, pam_smbpass.so, rpcclient and smbcacls
- start using /var/cache/samba, we need to keep state and there is
  more than just locks involved

[2.2.2-2]
- add 'reload' to the usage string in the startup script

[2.2.2-1]
- 2.2.2

[2.2.1a-5]
- Add patch from Jeremy Allison to fix IA64 alignment problems (#51497)

* Mon Aug 13 2001 Trond Eivind Glomsrod &lt;teg@redhat.com&gt;
- Don't include smbpasswd in samba, it's in samba-common (#51598)
- Add a disabled 'obey pam restrictions' statement - it's not
  active, as we use encrypted passwords, but if the admin turns
  encrypted passwords off the choice is available. (#31351)

* Wed Aug 08 2001 Trond Eivind Glomsrod &lt;teg@redhat.com&gt;
- Use /var/cache/samba instead of /var/lock/samba
- Remove 'domain controller' keyword from smb.conf, it's
  deprecated (from #13704)
- Sync some examples with smb.conf.default
- Fix password synchronization (#16987)

* Fri Jul 20 2001 Trond Eivind Glomsrod &lt;teg@redhat.com&gt;
- Tweaks of BuildRequires (#49581)

* Wed Jul 11 2001 Trond Eivind Glomsrod &lt;teg@redhat.com&gt;
- 2.2.1a bugfix release

* Tue Jul 10 2001 Trond Eivind Glomsrod &lt;teg@redhat.com&gt;
- 2.2.1, which should work better for XP

* Sat Jun 23 2001 Trond Eivind Glomsrod &lt;teg@redhat.com&gt;
- 2.2.0a security fix
- Mark lograte and pam configuration files as noreplace

* Fri Jun 22 2001 Trond Eivind Glomsrod &lt;teg@redhat.com&gt;
- Add the /etc/samba directory to samba-common

* Thu Jun 21 2001 Trond Eivind Glomsrod &lt;teg@redhat.com&gt;
- Add improvements to the smb.conf as suggested in #16931

* Tue Jun 19 2001 Trond Eivind Glomsrod &lt;teg@redhat.com&gt;
- (these changes are from the non-head version)
- Don't include /usr/sbin/samba, it's the same as the initscript
- unset TMPDIR, as samba can't write into a TMPDIR owned
  by root (#41193)
- Add pidfile: lines for smbd and nmbd and a config: line
  in the initscript  (#15343)
- don't use make -j
- explicitly include /usr/share/samba, not just the files in it

* Tue Jun 19 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- mount.smb/mount.smbfs go in /sbin, *not* %{_sbindir}

* Fri Jun 08 2001 Preston Brown &lt;pbrown@redhat.com&gt;
- enable encypted passwords by default

* Thu Jun 07 2001 Helge Deller &lt;hdeller@redhat.de&gt;
- build as 2.2.0-1 release
- skip the documentation-directories docbook, manpages and yodldocs
- don't include *.sgml documentation in package
- moved codepage-directory to /usr/share/samba/codepages
- make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2

* Mon May 21 2001 Helge Deller &lt;hdeller@redhat.de&gt;
- updated to samba 2.2.0
- moved codepages to %{_datadir}/samba/codepages
- use all available CPUs for building rpm packages
- use %{_xxx} defines at most places in spec-file
- 'License:' replaces 'Copyright:'
- dropped excludearch sparc
- de-activated japanese patches 100 and 200 for now
  (they need to be fixed and tested wth 2.2.0)
- separated swat.desktop file from spec-file and added
  german translations
- moved /etc/sysconfig/samba to a separate source-file
- use htmlview instead of direct call to netscape in
  swat.desktop-file

* Mon May 07 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- device-remove security fix again (&lt;tridge@samba.org&gt;)

* Fri Apr 20 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- fix tempfile security problems, officially (&lt;tridge@samba.org&gt;)
- update to 2.0.8

* Sun Apr 08 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- turn of SSL, kerberos

* Thu Apr 05 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- fix tempfile security problems (patch from &lt;Marcus.Meissner@caldera.de&gt;)

* Thu Mar 29 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- fix quota support, and quotas with the 2.4 kernel (#31362, #33915)

* Mon Mar 26 2001 Nalin Dahyabhai &lt;nalin@redhat.com&gt;
- tweak the PAM code some more to try to do a setcred() after initgroups()
- pull in all of the optflags on i386 and sparc
- don't explicitly enable Kerberos support -- it's only used for password
  checking, and if PAM is enabled it's a no-op anyway

* Mon Mar 05 2001 Tim Waugh &lt;twaugh@redhat.com&gt;
- exit successfully from preun script (bug #30644).

* Fri Mar 02 2001 Nalin Dahyabhai &lt;nalin@redhat.com&gt;
- rebuild in new environment

* Wed Feb 14 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- updated japanese stuff (#27683)

* Fri Feb 09 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- fix trigger (#26859)

* Wed Feb 07 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- add i18n support, japanese patch (#26253)

* Wed Feb 07 2001 Trond Eivind Glomsrod &lt;teg@redhat.com&gt;
- i18n improvements in initscript (#26537)

* Wed Jan 31 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- put smbpasswd in samba-common (#25429)

* Wed Jan 24 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- new i18n stuff

* Sun Jan 21 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- rebuild

* Thu Jan 18 2001 Bill Nottingham &lt;notting@redhat.com&gt;
- i18n-ize initscript
- add a sysconfig file for daemon options (#23550)
- clarify smbpasswd man page (#23370)
- build with LFS support (#22388)
- avoid extraneous pam error messages (#10666)
- add Urban Widmark's bug fixes for smbmount (#19623)
- fix setgid directory modes (#11911)
- split swat into subpackage (#19706)

* Wed Oct 25 2000 Nalin Dahyabhai &lt;nalin@redhat.com&gt;
- set a default CA certificate path in smb.conf (#19010)
- require openssl &gt;= 0.9.5a-20 to make sure we have a ca-bundle.crt file

* Mon Oct 16 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- fix swat only_from line (#18726, others)
- fix attempt to write outside buildroot on install (#17943)

* Mon Aug 14 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- add smbspool back in (#15827)
- fix absolute symlinks (#16125)

* Sun Aug 06 2000 Philipp Knirsch &lt;pknirsch@redhat.com&gt;
- bugfix for smbadduser script (#15148)

* Mon Jul 31 2000 Matt Wilson &lt;msw@redhat.com&gt;
- patch configure.ing (patch11) to disable cups test
- turn off swat by default

* Fri Jul 28 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- fix condrestart stuff

* Fri Jul 21 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- add copytruncate to logrotate file (#14360)
- fix init script (#13708)

* Sat Jul 15 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- move initscript back
- remove 'Using Samba' book from %doc
- move stuff to /etc/samba (#13708)
- default configuration tweaks (#13704)
- some logrotate tweaks

* Wed Jul 12 2000 Prospector &lt;bugzilla@redhat.com&gt;
- automatic rebuild

* Tue Jul 11 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- fix logrotate script (#13698)

* Thu Jul 06 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- fix initscripts req (prereq /etc/init.d)

* Wed Jul 05 2000 Than Ngo &lt;than@redhat.de&gt;
- add initdir macro to handle the initscript directory
- add a new macro to handle /etc/pam.d/system-auth

* Thu Jun 29 2000 Nalin Dahyabhai &lt;nalin@redhat.com&gt;
- enable Kerberos 5 and SSL support
- patch for duplicate profile.h headers

* Thu Jun 29 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- fix init script

* Tue Jun 27 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- rename samba logs (#11606)

* Mon Jun 26 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- initscript munging

* Fri Jun 16 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- configure the swat stuff usefully
- re-integrate some specfile tweaks that got lost somewhere

* Thu Jun 15 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- rebuild to get rid of cups dependency

* Wed Jun 14 2000 Nalin Dahyabhai &lt;nalin@redhat.com&gt;
- tweak logrotate configurations to use the PID file in /var/lock/samba

* Sun Jun 11 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- rebuild in new environment

* Thu Jun 01 2000 Nalin Dahyabhai &lt;nalin@redhat.com&gt;
- change PAM setup to use system-auth

* Mon May 08 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- fixes for ia64

* Sat May 06 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- switch to %configure

* Wed Apr 26 2000 Nils Philippsen &lt;nils@redhat.de&gt;
- version 2.0.7

* Sun Mar 26 2000 Florian La Roche &lt;Florian.LaRoche@redhat.com&gt;
- simplify preun

* Thu Mar 16 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- fix yp_get_default_domain in autoconf
- only link against readline for smbclient
- fix log rotation (#9909)

* Fri Feb 25 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- fix trigger, again.

* Mon Feb 07 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- fix trigger.

* Fri Feb 04 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- turn on quota support

* Mon Jan 31 2000 Cristian Gafton &lt;gafton@redhat.com&gt;
- rebuild to fox dependencies
- man pages are compressed

* Fri Jan 21 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- munge post scripts slightly

* Wed Jan 19 2000 Bill Nottingham &lt;notting@redhat.com&gt;
- turn on mmap again. Wheee.
- ship smbmount on alpha

* Mon Dec 06 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- turn off mmap. ;)

* Wed Dec 01 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- change /var/log/samba to 0700
- turn on mmap support

* Thu Nov 11 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- update to 2.0.6

* Fri Oct 29 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- add a %defattr for -common

* Tue Oct 05 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- shift some files into -client
- remove /home/samba from package.

* Tue Sep 28 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- initscript oopsie. killproc &lt;name&gt; -HUP, not other way around.

* Sun Sep 26 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- script cleanups. Again.

* Wed Sep 22 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- add a patch to fix dropped reconnection attempts

* Mon Sep 06 1999 Jeff Johnson &lt;jbj@redhat.com&gt;
- use cp rather than mv to preserve /etc/services perms (#4938 et al).
- use mktemp to generate /etc/tmp.XXXXXX file name.
- add prereqs on sed/mktemp/killall (need to move killall to /bin).
- fix trigger syntax (i.e. 'samba &lt; 1.9.18p7' not 'samba &lt; samba-1.9.18p7')

* Mon Aug 30 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- sed 's|nawk|gawk|' /usr/bin/convert_smbpasswd

* Sat Aug 21 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- fix typo in mount.smb

* Fri Aug 20 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- add a %trigger to work around (sort of) broken scripts in
  previous releases

* Mon Aug 16 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- initscript munging

* Mon Aug 09 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- add domain parsing to mount.smb

* Fri Aug 06 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- add a -common package, shuffle files around.

* Fri Jul 23 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- add a chmod in %postun so /etc/services &amp; inetd.conf don't become unreadable

* Wed Jul 21 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- update to 2.0.5
- fix mount.smb - smbmount options changed again.........
- fix postun. oops.
- update some stuff from the samba team's spec file.

* Fri Jun 18 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- split off clients into separate package
- don't run samba by default

* Mon Jun 14 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- fix one problem with mount.smb script
- fix smbpasswd on sparc with a really ugly kludge

* Thu Jun 10 1999 Dale Lovelace &lt;dale@redhat.com&gt;
- fixed logrotate script

* Tue May 25 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- turn of 64-bit locking on 32-bit platforms

* Thu May 20 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- so many releases, so little time
- explicitly uncomment 'printing = bsd' in sample config

* Tue May 18 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- update to 2.0.4a
- fix mount.smb arg ordering

* Fri Apr 16 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- go back to stop/start for restart (-HUP didn't work in testing)

* Fri Mar 26 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- add a mount.smb to make smb mounting a little easier.
- smb filesystems apparently don't work on alpha. Oops.

* Thu Mar 25 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- always create codepages

* Tue Mar 23 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- logrotate changes

* Sun Mar 21 1999 Cristian Gafton &lt;gafton@redhat.com&gt;
- auto rebuild in the new build environment (release 3)

* Fri Mar 19 1999 Preston Brown &lt;pbrown@redhat.com&gt;
- updated init script to use graceful restart (not stop/start)

* Tue Mar 09 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- update to 2.0.3

* Thu Feb 18 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- update to 2.0.2

* Mon Feb 15 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- swat swat

* Tue Feb 09 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- fix bash2 breakage in post script

* Fri Feb 05 1999 Bill Nottingham &lt;notting@redhat.com&gt;
- update to 2.0.0

* Mon Oct 12 1998 Cristian Gafton &lt;gafton@redhat.com&gt;
- make sure all binaries are stripped

* Thu Sep 17 1998 Jeff Johnson &lt;jbj@redhat.com&gt;
- update to 1.9.18p10.
- fix %triggerpostun.

* Tue Jul 07 1998 Erik Troan &lt;ewt@redhat.com&gt;
- updated postun triggerscript to check db_8.RHSA-2023-7139
- clear /etc/codepages from %preun instead of %postun

* Mon Jun 08 1998 Erik Troan &lt;ewt@redhat.com&gt;
- made the %postun script a tad less agressive; no reason to remove
  the logs or lock file (after all, if the lock file is still there,
  samba is still running)
- the %postun and %preun should only exectute if this is the final
  removal
- migrated %triggerpostun from Red Hat's samba package to work around
  packaging problems in some Red Hat samba releases

* Sun Apr 26 1998 John H Terpstra &lt;jht@samba.anu.edu.au&gt;
- minor tidy up in preparation for release of 1.9.18p5
- added findsmb utility from SGI package

* Wed Mar 18 1998 John H Terpstra &lt;jht@samba.anu.edu.au&gt;
- Updated version and codepage info.
- Release to test name resolve order

* Sat Jan 24 1998 John H Terpstra &lt;jht@samba.anu.edu.au&gt;
- Many optimisations (some suggested by Manoj Kasichainula &lt;manojk@io.com&gt;
- Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
- Compounded make line
- Updated smb.init restart mechanism
- Use compound mkdir -p line instead of individual calls to mkdir
- Fixed smb.conf file path for log files
- Fixed smb.conf file path for incoming smb print spool directory
- Added a number of options to smb.conf file
- Added smbadduser command (missed from all previous RPMs) - Doooh!
- Added smbuser file and smb.conf file updates for username map</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-7139.html" type="self" title="ELSA-2023-7139" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-2127.html" id="CVE-2022-2127" type="cve" title="CVE-2022-2127" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-34966.html" id="CVE-2023-34966" type="cve" title="CVE-2023-34966" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-34967.html" id="CVE-2023-34967" type="cve" title="CVE-2023-34967" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-34968.html" id="CVE-2023-34968" type="cve" title="CVE-2023-34968" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="openchange" version="2.3" release="32.0.1.el8" epoch="0" arch="src">
          <filename>openchange-2.3-32.0.1.el8.src.rpm</filename>
          <sum type="sha256">3f94d3b2edd781caf24541c676a02c858d78f3c9d2223fc1b7e3a4caa92bc777</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-19891</id>
    <title> module-build-service  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-03-15 00:00:00"/>
    <updated date="2023-03-15 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[3.6.1-1.0.1]
- Build with python3
- Change license to GPLv3
- Update mock configuration
- Update mbs-manager --help message
- Import DNF variables to expand 
- Add DISTGITS into configuration
- Modify references
- OLDIS-9485: Add conf/config.py file
- LINUX-10285: Add THIRD_PARTY_LICENSES.txt
- OLDIS-3728: Drop python-pungi as a dependency for modular builds
- OLDIS-4298: allow user to set DEFAULT_DISTTAG_MARKING on config.py

[3.6.1-1]
- new version

[3.4.1-1]
- new version

[2.32.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[2.32.0-2]
- Rebuilt for Python 3.9</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-19891.html" type="self" title="ELBA-2023-19891" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="module-build-service" version="3.6.1" release="1.0.1.el8" epoch="0" arch="noarch">
          <filename>module-build-service-3.6.1-1.0.1.el8.noarch.rpm</filename>
          <sum type="sha256">f9e86368566bb1812610f8c72eff95e0b37886111285f718386cdd9ed8b02104</sum>
        </package>
        <package name="module-build-service" version="3.6.1" release="1.0.1.el8" epoch="0" arch="src">
          <filename>module-build-service-3.6.1-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">197ff5519417bad769a4c8037db4708bd68246f6d7a2f820bfb774a46dafc2c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-20865</id>
    <title>edk2 security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-04-24 00:00:00"/>
    <updated date="2024-04-24 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>* Tue Feb 27 2024 Aaron Young
- Create new 20240227 release for OL8 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}

* Tue Aug 22 2023 Aaron Young
- Create new 20230822.cvm release for OL8</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-20865.html" type="self" title="ELSA-2024-20865" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36763.html" id="CVE-2022-36763" type="cve" title="CVE-2022-36763" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36764.html" id="CVE-2022-36764" type="cve" title="CVE-2022-36764" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36765.html" id="CVE-2022-36765" type="cve" title="CVE-2022-36765" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45229.html" id="CVE-2023-45229" type="cve" title="CVE-2023-45229" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45230.html" id="CVE-2023-45230" type="cve" title="CVE-2023-45230" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45231.html" id="CVE-2023-45231" type="cve" title="CVE-2023-45231" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45232.html" id="CVE-2023-45232" type="cve" title="CVE-2023-45232" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45233.html" id="CVE-2023-45233" type="cve" title="CVE-2023-45233" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45234.html" id="CVE-2023-45234" type="cve" title="CVE-2023-45234" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45235.html" id="CVE-2023-45235" type="cve" title="CVE-2023-45235" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2-tools" version="20240227" release="5.el8" epoch="1" arch="aarch64">
          <filename>edk2-tools-20240227-5.el8.aarch64.rpm</filename>
          <sum type="sha256">4f27ccbc8f35a732e108c8015d2c0c792e8e11637fac9c76b55cf09c8cad2465</sum>
        </package>
        <package name="edk2" version="20240227" release="5.el8" epoch="1" arch="src">
          <filename>edk2-20240227-5.el8.src.rpm</filename>
          <sum type="sha256">241ab2257953cd7c570aca2262dd31802e2cd18a85bc8c9e70b7b75270136d6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-36016</id>
    <title> perl-Test-Differences  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-06-26 00:00:00"/>
    <updated date="2025-06-26 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[0.6400-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.6400-9]
- Perl 5.28 rebuild

[0.6400-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.6400-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0.6400-6]
- Perl 5.26 rebuild

[0.6400-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.6400-4]
- Adjust package version computation to SRPM build root witout perl

[0.6400-3]
- Perl 5.24 rebuild

[0.6400-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.6400-1]
- Update to 0.64
  - Bump dependency version for Text::Diff to avoid a buggy release
  - Make tests pass with relocation perl (CPAN RT#103133)

[0.6300-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0.6300-2]
- Perl 5.22 rebuild

[0.6300-1]
- Update to 0.63
  - Make '' and undef not equal
  - Made Data::Dumper minimum version 2.126 to resolve CPAN RT#60798
  - Allow an option to override Sortkeys in C&lt;eq_or_diff&gt;
  - Unnumbered tests; there's no point to them
  - Document the Text::Diff unicode fix
  - Add ability to customize 'Got' and 'Expected' column headers
  - Minor doco-fixes
  - Remove use of flatten, always use Data::Dumper for saner, more readable
    output (CPAN RT#95446)
- This release by DCANTRELL -&gt; update source URL
- Drop %defattr, redundant since rpm 4.4
- Use %{_fixperms} macro rather than our own chmod incantation
- Don't need to remove empty directories from the buildroot

[0.5000-13]
- Perl 5.20 rebuild

[0.5000-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0.5000-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[0.5000-10]
- Perl 5.18 rebuild</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-36016.html" type="self" title="ELBA-2025-36016" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="perl-Test-Differences" version="0.6400" release="10.el8" epoch="0" arch="src">
          <filename>perl-Test-Differences-0.6400-10.el8.src.rpm</filename>
          <sum type="sha256">52e159d37cec737e688ae88e659110363b0f83fbc57116ae7ec1c405ac6046c1</sum>
        </package>
        <package name="perl-Test-Differences" version="0.6400" release="10.el8" epoch="0" arch="noarch">
          <filename>perl-Test-Differences-0.6400-10.el8.noarch.rpm</filename>
          <sum type="sha256">a41dce2e612b62e05663888e569b296ad6c538148e41783cec161bd3f668d379</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1801</id>
    <title>libgpod bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[0.8.3-24]
+ libgpod-0.8.3-24
- Fix mode of /run/libgpod in tmpfiles.d config, use /run
- Resolves: #1657264</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1801.html" type="self" title="ELBA-2021-1801" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libgpod" version="0.8.3" release="24.el8" epoch="0" arch="aarch64">
          <filename>libgpod-0.8.3-24.el8.aarch64.rpm</filename>
          <sum type="sha256">d312ba9469d379ad2a73e05c4cd1b713fff7b33c997723efba17d51dd877d6e1</sum>
        </package>
        <package name="libgpod" version="0.8.3" release="24.el8" epoch="0" arch="src">
          <filename>libgpod-0.8.3-24.el8.src.rpm</filename>
          <sum type="sha256">16bd1aa23b1b059e527d115523788af334673aba15192bc9fe16dd4b8a0a99f3</sum>
        </package>
        <package name="libgpod-devel" version="0.8.3" release="24.el8" epoch="0" arch="aarch64">
          <filename>libgpod-devel-0.8.3-24.el8.aarch64.rpm</filename>
          <sum type="sha256">130cd2c9f5ff13adb9f27edc7e81e5d0b7150c1701db308156bfca0b04b79301</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-1690</id>
    <title>gtk-vnc bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-05 00:00:00"/>
    <updated date="2020-05-05 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.9.0-2]
- Fix crash when TLS handshake fails (rhbz #1665837)
- Ensure auth failure signal is emitted when SASL fails (rhbz #1688275)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-1690.html" type="self" title="ELBA-2020-1690" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="gtk-vnc" version="0.9.0" release="2.el8" epoch="0" arch="src">
          <filename>gtk-vnc-0.9.0-2.el8.src.rpm</filename>
          <sum type="sha256">cb6eb62737e96e92aab0a7375693b382447cefbddb0a2b07c1cbf32bf7d73680</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1823</id>
    <title>gcc-toolset-10-gcc bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[10.2.1-8.2.0.1]
- Fix Orabug 32423691- gcc10 SEGV for every test in sregress: ORA-7445_ksmplru_add_batchksm
  same bug as PR tree-optimization/100053:
  gcc11-pr100053.patch
- Fix Orabug 31197798 (Profile data size way too big)
  same bug as PR gcov-profile/95348:
  gcc11-pr95348.patch
- Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.

[10.2.1-8.2]
- actually use libgfortran_nonshared.a (#1929375)
- have libasan-devel require libasan6 (#1939638)

[10.2.1-8.1]
- apply fix for -flto=auto with missing make (#1896093, PR lto/97524)

[10.2.1-8]
- update from Fedora gcc 10.2.1-8 (#1878887)
- emit DW_AT_declaration on declaration-only DIEs (#1897272, PR debug/97060)
- add BuildRequires: make and Requires: make, the latter for -flto reasons

[10.2.1-7.1]
- adjust some libstdc++_nonshared.a symbol

[10.2.1-7]
- update from Fedora gcc 10.2.1-7 (#1878887)

[10.2.1-2.1]
- re-apply Fortran patches</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1823.html" type="self" title="ELBA-2021-1823" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="gcc-toolset-10-gcc" version="10.2.1" release="8.2.0.1.el8" epoch="0" arch="src">
          <filename>gcc-toolset-10-gcc-10.2.1-8.2.0.1.el8.src.rpm</filename>
          <sum type="sha256">512b1b54f9f1d97210d69bcf09d7e15a0021f973c7be137d0e150e6171dcce42</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-4433</id>
    <title> python3 security and bug fix update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[3.6.8-31.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]

[3.6.8-31]
- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926

[3.6.8-30]
- Remove downstream 00178-dont-duplicate-flags-in-sysconfig.patch which
  introduced a bug on distutils.sysconfig.get_config_var('LIBPL')
  (rhbz#1851090).

[3.6.8-29]
- Fix python3-config --configdir (rhbz#1772992).

[3.6.8-28]
- Security fix for CVE-2020-8492
Resolves: rhbz#1810618

[3.6.8-27]
- Add a sentinel value on the Hmac_members table of the fips compliant hmac module
Resolves: rhbz#1800512

[3.6.8-26]
- Skip test_startup_imports from test_site if we have a .pth file in sys.path
Resolves: rhbz#1814392

[3.6.8-25]
- Security fix for CVE-2019-16935
Resolves: rhbz#1798001

[3.6.8-24]
- Build Python with -fno-semantic-interposition for better performance
- https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup
- Also fix test_gdb failures with Link Time Optimizations
Resolves: rhbz#1724996</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-4433.html" type="self" title="ELSA-2020-4433" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-16935.html" id="CVE-2019-16935" type="cve" title="CVE-2019-16935" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-20907.html" id="CVE-2019-20907" type="cve" title="CVE-2019-20907" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14422.html" id="CVE-2020-14422" type="cve" title="CVE-2020-14422" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-8492.html" id="CVE-2020-8492" type="cve" title="CVE-2020-8492" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="python3" version="3.6.8" release="31.0.1.el8" epoch="0" arch="src">
          <filename>python3-3.6.8-31.0.1.el8.src.rpm</filename>
          <sum type="sha256">cc0b299573f2e0eb02cb936f4b2d6f4d3ff19a3e8529c20322824a97e882a09a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-4436</id>
    <title> gnome-software and fwupd security, bug fix, and enhancement update</title>
    <severity>Low</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>appstream-data
[8-20200724]
- Regenerate the RHEL metadata to include the EPEL apps too
- Resolves: #1844488

[8-20200630]
- Regenerate the RHEL metadata
- Resolves: #1844488

fwupd
[1.4.2-4.0.1]
- Build with the updated Oracle certificate
- Use oraclesecureboot301 as certdir [Orabug: 29881368]
- Use new signing certificate (Alex Burmashev)

[1.4.2-4]
- Add signing with redhatsecureboot503 cert
  Related: CVE-2020-10713

[1.4.2-3]
- Obsolete the now-dead fwupdate package to prevent file conflicts
- Resolves: #1859202

[1.4.2-2]
- Security fix for CVE-2020-10759
- Resolves: #1844324

[1.4.2-1]
- New upstream release
- Backport a patch to fix the synaptics fingerprint reader update.
- Resolves: #1775277

[1.4.1-1]
- New upstream release
- Resolves: #1775277

gnome-software
[3.36.1-4]
- Fix 'Show Details' to correctly work for rpm-installed firefox
- Resolves: #1845714

[3.36.1-3]
- Upload correct 3.36.1 tarball
- Fix hardcoded desktop and appdata names to match whats in RHEL 8.3
- Add back shell extensions support
- Resolves: #1839774

[3.36.1-2]
- Add support for basic auth and webflow auth in flatpak plugin
- Resolves: #1815502

[3.36.1-1]
- Update to 3.36.1
- Resolves: #1797932

libxmlb
[0.1.15-1]
- Initial release for RHEL</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-4436.html" type="self" title="ELSA-2020-4436" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10759.html" id="CVE-2020-10759" type="cve" title="CVE-2020-10759" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="fwupd" version="1.4.2" release="4.0.1.el8" epoch="0" arch="src">
          <filename>fwupd-1.4.2-4.0.1.el8.src.rpm</filename>
          <sum type="sha256">a007a487182a32bdcf56d3d00676bf9b2e9ed3ff0a6d359db7f26440e88e4b73</sum>
        </package>
        <package name="libxmlb" version="0.1.15" release="1.el8" epoch="0" arch="src">
          <filename>libxmlb-0.1.15-1.el8.src.rpm</filename>
          <sum type="sha256">0087d154ab4516e75295be068c09a2907fc4b22281f20cfda75acfb06a62a54a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-4451</id>
    <title> GNOME security, bug fix, and enhancement update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>dleyna-renderer
[0.6.0-3]
- Add a manual
Resolves: #1612579

frei0r-plugins
[1.6.1-7]
- Rebuild with newer annobin to fix rpmdiff problems
- Fix the build with a newer opencv
- Resolves: rhbz#1703994

gdm
[3.28.3-34]
- Fix file descriptor leak
  Resolves: #1877853

[3.28.3-33]
- Fix problem with Xorg fallback
  Resolves: #1868260

[3.28.3-32]
- Add dconf db to file manifest
  Related: #1833158

[3.28.3-31]
- add back gdm system db to dconf profile
  Resolves: #1833158

[3.28.3-30]
- Make sure login screen is killed during login
  Resolves: #1618481

gnome-control-center
[3.28.2-22]
- Categorize Infiniband devices correctly
  Resolves: #1826379

[3.28.2-21]
- Honor sound theme changes when changing from the default theme
- Resolves: #1706008

[3.28.2-20]
- Fix 90min automatic sleep option to not last 80min
- Resolves: #1706076

gnome-photos
[3.28.1-3]
- Disable Python 2 during the build - itstool doesnt need it anymore
Resolves: #1597806

[3.28.1-2]
- rebuild

gnome-remote-desktop
[0.1.8-3]
- Backport cursor only frame fixes
  Related: #1837406

[0.1.8-2]
- Dont crash on metadata only buffers
  Resolves: #1847062

[0.1.8-1]
- Rebase to 0.1.8
  Resolves: #1837406

gnome-session
[3.28.1-10.0.1]
- Update kiosk-session subpackage with Oracle references [Orabug: 32095108]

[3.28.1-10]
- Show cursor explicitly from session selector
  Resolves: #1624430

[3.28.1-9]
- Add kiosk-session subpackage to help users set up RHEL for
  kiosk/point-of-sale use.
  Resolves: #1739556

gnome-settings-daemon
[3.32.0-11]
- Remove subman plugin for now
  Resolves: #1872457

[3.32.0-10]
- Disable subman plugin on CentOS
  Resolves: #1827030

gnome-shell
[3.32.2-20]
- Fix popupMenu keynav when NumLock is active
  Resolves: #1840080

[3.32.2-19]
- Fix last backport
  Resolves: #1847051

[3.32.2-18]
- Fix more spurious allocation warnings
  Resolves: #1715845

[3.32.2-17]
- Really allow using perf-tool on wayland
  Resolves: #1652178
- Fix timed login without user list
  Resolves: #1668895
- Fix HighContrast/symbolic icon mixup
  Resolves: #1794045
- Backport introspect API changes
  Resolves: #1837413

[3.32.2-16]
- Drop bad upstream patch
  Resolves: #1820760

[3.32.2-15]
- Improve performance under load
  Resolves: #1820760

gnome-shell-extensions
[3.32.1-11]
- Adjust dash-to-dock for classic backports
  Resolves: #1805929
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1824362

gnome-terminal
[3.28.3-2]
- Add a manual
- Resolves: #1612688

gsettings-desktop-schemas
[3.32.0-5]
- Recommend DejaVu Sans Mono font as the default monospace font
  Resolves: #1656262

gtk3
[3.22.30-6]
- Fix reuse of list box header widgets (#rhbz1843486)

gtk-doc
[1.28-2]
- Backport a patch to fix x86_64/i686 differences in generated documentation
- Resolves: #1634770

gvfs
[1.36.2-10]
- Fix libusb(x) requirements (rhbz#1866332)

[1.36.2-9]
- Improve enumeration performance of smb backend (rhbz#1569868)

LibRaw
[0.19.5-2]
- Backport fix for CVE-2020-15503 from Fedora
Resolves: #1853529

libsoup
[2.62.3-2]
- Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270)

mutter
[3.32.2-48]
- Fix GLX stereo buffer rebase error
  Resolves: #1880339

[3.32.2-47]
- Fix screen sharing on wayland
  Resolves: #1873963

[3.32.2-46]
- Handle cursor only screen cast frames better
  Related: #1837381

[3.32.2-45]
- Handle GPU unplug gracefully
  Resolves: #1846191

[3.32.2-44]
- Dont show widow actor until explictly shown
  Resolves: #1719937

[3.32.2-43]
- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1847203

[3.32.2-42]
- Dont pass DMA buffers if they cant be mmap():ed
  Related: #1847062

[3.32.2-41]
- Backport is_rendering_hardware_acclerated() API
  Related: #1837381

[3.32.2-40]
- Fix DMA buffer memory leak
  Related: #1837381

[3.32.2-39]
- Fix incorrect pipewire dependency version
  Related: #1837381

[3.32.2-38]
- Backport screen cast and remote desktop improvements
  Resolves: #1837381

[3.32.2-37]
- Fix corrupted background after suspend
  Resolves: #1828162

nautilus
[3.28.1-14]
- Fix broken tracker query under certain locales (rhbz#1847061)

[3.28.1-13]
- Clear selection if any files dont match the pattern (rhbz#1207179)
- Fix endless content size calculations (rhbz#1566027)
- Honor umask when creating new files (rhbz#1778579)
- Close 'There is no application...' dialog after response (rhbz#1816070)

PackageKit
[1.1.12-6.0.1]
- removed rhel-Vendor.conf.patch

[1.1.12-6]
- Fix documentation links in Vendor.conf
- Resolves: #1837648

[1.1.12-5]
- Do not shutdown the daemon on idle
- Resolves: #1814820

pipewire0.2
[0.2.7-6]
- Fix Conflicts: line
- Remove Recommends: line, its wrong
- Resolves: rhbz#1832347

[0.2.7-5]
- Fix Conflicts: line
- Resolves: rhbz#1832347

[0.2.7-4]
- Add gating file
- Resolves: rhbz#1832347

[0.2.7-3]
- Change source URL
- Resolves: rhbz#1832347

[0.2.7-2]
- Add compat -devel package

[0.2.7-1]
- First version
- Fix bluez5 plugins build

pipewire
[0.3.6-1]
- Update to 0.3.6
- Resolves: rhbz#1832347

[0.3.5-3]
- Rebuild
- Resolves: rhbz#1832347

[0.3.5-2]
- Disable vulkan
- Resolves: rhbz#1832347

[0.3.5-1]
- Update to 0.3.5
- Disable pulse and jack
- Add patch to work with meson 0.49
- Add patch to fix neon compilation
- Resolves: rhbz#1832347

potrace
[1.15-3]
- Fixing build for flatpak (rhbz#1840788)

pygobject3
[3.28.3-2]
- Add lock to avoid two type object wrappers getting generated at
  the same time in multi-threaded programs.
  Resolves: #1844578

tracker
[2.1.5-2]
- Rebuild to include tracker-devel in CRB
- Resolves: #1758891

vte291
[0.52.4-2]
- Avoid overriding -fno-exceptions
Resolves: #1804719

[0.52.4-1]
- Update to 0.52.4
Resolves: #1804719

webkit2gtk3
[2.28.4-1]
- Update to 2.28.4
- Related: #1817143

[2.28.2-2]
- Related: rhbz#1817143 Properly remove webkit2gtk3-plugin-process-gtk2 package

[2.28.2-1]
- Resolves: rhbz#1817143 Update to 2.28.2

webrtc-audio-processing
[0.3-9]
- Rebuild to address Annobin coverage issues
Resolves: #1704148

xdg-desktop-portal
[1.6.0-2]
- Require pipewire0.2-libs for legacy application support.
  Resolves: #1854734

[1.6.0-1]
- Rebase to 1.6.0 (#1775345)
- Backport PipeWire 0.3 support (#1775345)
- Backport fixes (#1775345)

xdg-desktop-portal-gtk
[1.6.0-1]
- Rebase to 1.6.0 (#1837413)
- Bump supported Mutter screen cast API version (#1837413)
- Backport bugfix (#1837413)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-4451.html" type="self" title="ELSA-2020-4451" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8625.html" id="CVE-2019-8625" type="cve" title="CVE-2019-8625" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8710.html" id="CVE-2019-8710" type="cve" title="CVE-2019-8710" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8720.html" id="CVE-2019-8720" type="cve" title="CVE-2019-8720" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8743.html" id="CVE-2019-8743" type="cve" title="CVE-2019-8743" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8764.html" id="CVE-2019-8764" type="cve" title="CVE-2019-8764" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8766.html" id="CVE-2019-8766" type="cve" title="CVE-2019-8766" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8769.html" id="CVE-2019-8769" type="cve" title="CVE-2019-8769" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8771.html" id="CVE-2019-8771" type="cve" title="CVE-2019-8771" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8782.html" id="CVE-2019-8782" type="cve" title="CVE-2019-8782" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8783.html" id="CVE-2019-8783" type="cve" title="CVE-2019-8783" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8808.html" id="CVE-2019-8808" type="cve" title="CVE-2019-8808" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8811.html" id="CVE-2019-8811" type="cve" title="CVE-2019-8811" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8812.html" id="CVE-2019-8812" type="cve" title="CVE-2019-8812" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8813.html" id="CVE-2019-8813" type="cve" title="CVE-2019-8813" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8814.html" id="CVE-2019-8814" type="cve" title="CVE-2019-8814" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8815.html" id="CVE-2019-8815" type="cve" title="CVE-2019-8815" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8816.html" id="CVE-2019-8816" type="cve" title="CVE-2019-8816" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8819.html" id="CVE-2019-8819" type="cve" title="CVE-2019-8819" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8820.html" id="CVE-2019-8820" type="cve" title="CVE-2019-8820" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8823.html" id="CVE-2019-8823" type="cve" title="CVE-2019-8823" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8835.html" id="CVE-2019-8835" type="cve" title="CVE-2019-8835" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8844.html" id="CVE-2019-8844" type="cve" title="CVE-2019-8844" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-8846.html" id="CVE-2019-8846" type="cve" title="CVE-2019-8846" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10018.html" id="CVE-2020-10018" type="cve" title="CVE-2020-10018" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-11793.html" id="CVE-2020-11793" type="cve" title="CVE-2020-11793" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14391.html" id="CVE-2020-14391" type="cve" title="CVE-2020-14391" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-15503.html" id="CVE-2020-15503" type="cve" title="CVE-2020-15503" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3862.html" id="CVE-2020-3862" type="cve" title="CVE-2020-3862" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3864.html" id="CVE-2020-3864" type="cve" title="CVE-2020-3864" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3865.html" id="CVE-2020-3865" type="cve" title="CVE-2020-3865" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3867.html" id="CVE-2020-3867" type="cve" title="CVE-2020-3867" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3868.html" id="CVE-2020-3868" type="cve" title="CVE-2020-3868" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3885.html" id="CVE-2020-3885" type="cve" title="CVE-2020-3885" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3894.html" id="CVE-2020-3894" type="cve" title="CVE-2020-3894" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3895.html" id="CVE-2020-3895" type="cve" title="CVE-2020-3895" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3897.html" id="CVE-2020-3897" type="cve" title="CVE-2020-3897" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3899.html" id="CVE-2020-3899" type="cve" title="CVE-2020-3899" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3900.html" id="CVE-2020-3900" type="cve" title="CVE-2020-3900" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3901.html" id="CVE-2020-3901" type="cve" title="CVE-2020-3901" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-3902.html" id="CVE-2020-3902" type="cve" title="CVE-2020-3902" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9802.html" id="CVE-2020-9802" type="cve" title="CVE-2020-9802" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9803.html" id="CVE-2020-9803" type="cve" title="CVE-2020-9803" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9805.html" id="CVE-2020-9805" type="cve" title="CVE-2020-9805" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9806.html" id="CVE-2020-9806" type="cve" title="CVE-2020-9806" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9807.html" id="CVE-2020-9807" type="cve" title="CVE-2020-9807" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9843.html" id="CVE-2020-9843" type="cve" title="CVE-2020-9843" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9850.html" id="CVE-2020-9850" type="cve" title="CVE-2020-9850" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9862.html" id="CVE-2020-9862" type="cve" title="CVE-2020-9862" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9893.html" id="CVE-2020-9893" type="cve" title="CVE-2020-9893" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9894.html" id="CVE-2020-9894" type="cve" title="CVE-2020-9894" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9895.html" id="CVE-2020-9895" type="cve" title="CVE-2020-9895" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9915.html" id="CVE-2020-9915" type="cve" title="CVE-2020-9915" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9925.html" id="CVE-2020-9925" type="cve" title="CVE-2020-9925" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="potrace" version="1.15" release="3.el8" epoch="0" arch="src">
          <filename>potrace-1.15-3.el8.src.rpm</filename>
          <sum type="sha256">79d81f793d227a145167bdc1b3009b25827244284cd3d4be5416ee6a51be063a</sum>
        </package>
        <package name="gtk3" version="3.22.30" release="6.el8" epoch="0" arch="src">
          <filename>gtk3-3.22.30-6.el8.src.rpm</filename>
          <sum type="sha256">e99229175b76d9fbf230ffc18345e56e122ab17e4177ee31255a7a1aed0f1524</sum>
        </package>
        <package name="gnome-settings-daemon" version="3.32.0" release="11.el8" epoch="0" arch="src">
          <filename>gnome-settings-daemon-3.32.0-11.el8.src.rpm</filename>
          <sum type="sha256">da523fe69f725450ab16c5d739382a7202aaf23905978a08c9ee931982dc3785</sum>
        </package>
        <package name="gdm" version="3.28.3" release="34.el8" epoch="1" arch="src">
          <filename>gdm-3.28.3-34.el8.src.rpm</filename>
          <sum type="sha256">8da342bc5387ac7113577d9c6b16f42be159c190dcfe2fd300a28021d9365a18</sum>
        </package>
        <package name="webrtc-audio-processing" version="0.3" release="9.el8" epoch="0" arch="src">
          <filename>webrtc-audio-processing-0.3-9.el8.src.rpm</filename>
          <sum type="sha256">4c70e29bd82e417085b8c8b67bc605a9897353d44ca07c5dfd39c4e32f13d255</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1837</id>
    <title>liblangtag bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[0.6.2-8]
- Suppress documentation in Flatpak builds
  Resolves: rhbz#1896257
- build gir with non-parallel to avoid strange behavior.</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1837.html" type="self" title="ELBA-2021-1837" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="liblangtag" version="0.6.2" release="8.el8" epoch="0" arch="src">
          <filename>liblangtag-0.6.2-8.el8.src.rpm</filename>
          <sum type="sha256">22efd660b2d698f8059c181e746adddaef590b504df0a0077c6a36f25005c2b5</sum>
        </package>
        <package name="liblangtag" version="0.6.2" release="8.el8" epoch="0" arch="aarch64">
          <filename>liblangtag-0.6.2-8.el8.aarch64.rpm</filename>
          <sum type="sha256">a8b5daa8352fbae5f2059c65b1e642bac6110039bf060466225e2172469965e4</sum>
        </package>
        <package name="liblangtag-data" version="0.6.2" release="8.el8" epoch="0" arch="noarch">
          <filename>liblangtag-data-0.6.2-8.el8.noarch.rpm</filename>
          <sum type="sha256">504d846eb9afa366478d8e9b6ba5dbf7bd2c3e9b167ea8c29527aef89a016640</sum>
        </package>
        <package name="liblangtag-gobject" version="0.6.2" release="8.el8" epoch="0" arch="aarch64">
          <filename>liblangtag-gobject-0.6.2-8.el8.aarch64.rpm</filename>
          <sum type="sha256">f52d65424c5a05fe56a37881a4cbd7e3a5f56aa571bc2398289f98e806a94c82</sum>
        </package>
        <package name="liblangtag-devel" version="0.6.2" release="8.el8" epoch="0" arch="aarch64">
          <filename>liblangtag-devel-0.6.2-8.el8.aarch64.rpm</filename>
          <sum type="sha256">bbf68e39a03ee9dd3b1eef96da5d7f0e0e9670ad18d424c32bb0c14bedc2afa1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-5329</id>
    <title>cheese bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-07-01 00:00:00"/>
    <updated date="2022-07-01 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2:3.28.0-4]
- Ignore grayscale formats from IR cameras (#1923065)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-5329.html" type="self" title="ELBA-2022-5329" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="cheese" version="3.28.0" release="4.el8_6" epoch="2" arch="src">
          <filename>cheese-3.28.0-4.el8_6.src.rpm</filename>
          <sum type="sha256">dd99896323eaa88772445830c158da41ce518dc9b576fa79717ca4a85d8a2e39</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-4508</id>
    <title> libsolv security, bug fix, and enhancement update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.7.11-1]
- Update to 0.7.11
- selected bug fixes:
  * support arch&lt;-&gt;noarch package changes when creating patch
    conflicts from the updateinfo data
  * also support other rpm database types
  * fixed solv_zchunk decoding error if large chunks are used
  * treat retracted pathes as irrelevant
  * made add_update_target work with multiversion installs
- new features
  * support for SOLVER_BLACKLIST jobs that block the installation of matched
    packages unless they are directly selected by an SOLVER_INSTALL job
  * libsolv now also parses the patch status in the updateinfo parser
  * new solvable_matchessolvable() function
  * support conda constrains dependencies
  * new rpm_stat_database() function
  * new rpm_hash_database_state() function</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-4508.html" type="self" title="ELSA-2020-4508" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-20387.html" id="CVE-2019-20387" type="cve" title="CVE-2019-20387" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libsolv" version="0.7.11" release="1.el8" epoch="0" arch="src">
          <filename>libsolv-0.7.11-1.el8.src.rpm</filename>
          <sum type="sha256">56177fabbc43e552aab7d47095ef83fef324f5fa8e153aea7ccad23b802a601d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2019-3673</id>
    <title> lldpad security and bug fix update</title>
    <severity>Low</severity>
    <release>Oracle Linux 8</release>
    <issued date="2019-11-14 00:00:00"/>
    <updated date="2019-11-14 00:00:00"/>
    <rights>Copyright 2019 Oracle, Inc.</rights>
    <description>[1.0.1-13.git036e314]
- After gating yml updates

[1.0.1-12.git036e314]
- Add support for DSCP selectors in APP TLVs (#1704660)

[1.0.1-11.git036e314]
- Fix memleak on TLV reception (#1727326)

[1.0.1-10.git036e314]
- Fix the OID display (#1614933)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2019-3673.html" type="self" title="ELSA-2019-3673" />
      <reference href="https://linux.oracle.com/cve/CVE-2018-10932.html" id="CVE-2018-10932" type="cve" title="CVE-2018-10932" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="lldpad" version="1.0.1" release="13.git036e314.el8" epoch="0" arch="src">
          <filename>lldpad-1.0.1-13.git036e314.el8.src.rpm</filename>
          <sum type="sha256">9fcd5d14da47037e5460a4ac0a78c2a81ff2efde80eac796cb047ac3c5a91593</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1862</id>
    <title>libvoikko bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[4.1.1-2]
- Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
- Resolves: rhbz#1896322</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1862.html" type="self" title="ELBA-2021-1862" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libvoikko" version="4.1.1" release="2.el8" epoch="0" arch="src">
          <filename>libvoikko-4.1.1-2.el8.src.rpm</filename>
          <sum type="sha256">c1c714c71ac4653d36c4f16d2016116e04dd9d7f5d344f4a555599de00ffd602</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-1750</id>
    <title>sblim-cmpi-base bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-05 00:00:00"/>
    <updated date="2020-05-05 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.6.4-14]
- Fix getting of InstallDate property, improve it to work on non en_US locales
  and update support for recent Fedora distributions
  Resolves: #1776670</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-1750.html" type="self" title="ELBA-2020-1750" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="sblim-cmpi-base" version="1.6.4" release="14.el8" epoch="0" arch="src">
          <filename>sblim-cmpi-base-1.6.4-14.el8.src.rpm</filename>
          <sum type="sha256">88ecd9e0a10531bd82475664e78fb20fc629d91d2c22b004ebb2414986a986ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-4568</id>
    <title> libldb security, bug fix, and enhancement update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[2.1.3-2]
- Resolves: rhbz#1849615 - Fix CVE-2020-10730 use-after-free

[2.1.3-1]
- Resolves: rhbz#1817567 - Rebase libldb to 2.1.3 for samba</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-4568.html" type="self" title="ELSA-2020-4568" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-10730.html" id="CVE-2020-10730" type="cve" title="CVE-2020-10730" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libldb" version="2.1.3" release="2.el8" epoch="0" arch="src">
          <filename>libldb-2.1.3-2.el8.src.rpm</filename>
          <sum type="sha256">02fb448f156531d93363b449fcea1d093ae5f3bb39204001627aa5a9046465f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-14011</id>
    <title> pycairo-epel Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-04-04 00:00:00"/>
    <updated date="2022-04-04 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.16.3-6]
- Convert RHEL8 pycairo to pycairo-epel with just python3-cairo-devel subpackage
- Related: rhbz#2053665

[1.16.3-6]
- Rebuild due of python2-pycairo for GIMP (RCM-39388)

[1.16.3-3]
- Remove the python2 subpackages
  https://bugzilla.redhat.com/show_bug.cgi?id=1590820

[1.16.3-2]
- Allow Python 2 for build
  See: https://hurl.corp.redhat.com/rhel8-py2

- Skip tests on Python 2 (python2-pytest is being removed)

[1.16.3-1]
- Update to 1.16.3

[1.16.1-1]
- Update to 1.16.1

[1.16.0-1]
- Update to 1.16.0

[1.15.6-1]
- Update to 1.15.6

[1.15.4-1]
- Update to 1.15.4

[1.15.3-1]
- Update to 1.15.3

[1.15.2-1]
- Update to 1.15.2
- Switch to new upstream at https://github.com/pygobject/pycairo
- Switch to distutils build system
- Tighten subpackage deps with the _isa macro
- Rename Python 2 package to python2-cairo
- Enable Python 3 support</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-14011.html" type="self" title="ELBA-2022-14011" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="python3-cairo-devel" version="1.16.3" release="6.el8" epoch="0" arch="aarch64">
          <filename>python3-cairo-devel-1.16.3-6.el8.aarch64.rpm</filename>
          <sum type="sha256">09789c4a123033b804c8cf8ae8f3f92c707a8958527e3354e50521415ac2c31b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-4628</id>
    <title> libreoffice security, bug fix, and enhancement update</title>
    <severity>Low</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>libcmis
[0.5.2-1]
- Related: rhbz#1796893 update to 0.5.2

liborcus
[0.14.1-1]
- Related: rhbz#1796893 update to 0.14.1

libreoffice
[6.3.6.2-3.0.1]
- Replace colors with Oracle colors [Orabug: 32120093]
- Build with --with-vendor='Oracle America, Inc.'
- Added the --with-hamcrest option to configure.

[1:6.3.6.2-3]
- Obsoletes any libreoffice-gtk2-debuginfo along with libreoffice-gtk2

[1:6.3.6.2-2]
- Resolves: rhbz#1841907 always produce utf-8 from gettext

[1:6.3.6.2-1]
- rhbz#1796893 latest stable release

[1:6.3.5.2-7]
- rhbz#1796893 dont show error dialog on G_IO_ERROR_FAILED_HANDLED

[1:6.3.5.2-6]
- rhbz#1819798 Start Center crash after pressing Help button before
  using any topevel module

[1:6.3.5.2-5]
- rhbz#1796893 spreadsheetml2ooo.xsl was not well formed xml
- rhbz#1796893 fix impress print dialog range

[1:6.3.5.2-4]
- rhbz#1796893 fix help-&gt;licence info-&gt;license

[1:6.3.5.2-3]
- rhbz#1796893 disable tip of the day by default

[1:6.3.5.2-2]
- rhbz#1796893 improve langpack requires

[1:6.3.5.2-1]
- rhbz#1796893 latest stable release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-4628.html" type="self" title="ELSA-2020-4628" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12802.html" id="CVE-2020-12802" type="cve" title="CVE-2020-12802" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-12803.html" id="CVE-2020-12803" type="cve" title="CVE-2020-12803" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libcmis" version="0.5.2" release="1.el8" epoch="0" arch="src">
          <filename>libcmis-0.5.2-1.el8.src.rpm</filename>
          <sum type="sha256">63afe2ef2da3a42fe3849624f4fdad9ee467738fe5f50d798bc53db5aa60cf00</sum>
        </package>
        <package name="liborcus" version="0.14.1" release="1.el8" epoch="0" arch="src">
          <filename>liborcus-0.14.1-1.el8.src.rpm</filename>
          <sum type="sha256">732eaa12fb4e479588061b253a6e212ac6a95969f23cdf01101697b2f8f946a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2020-4649</id>
    <title> evolution security and bug fix update</title>
    <severity>Low</severity>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-10 00:00:00"/>
    <updated date="2020-11-10 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>bogofilter
[1.2.5-2]
- Bump version to have OSCI/gating tests rerun with updated tests

[1.2.5-1]
- Resolves: #1836279 (Update to 1.2.5)

evolution
[3.28.5-14]
- Related: #1817143 (Add a small patch to behave better with WebKitGTK 2.28)

[3.28.5-13]
- Resolves: #1836165 (Cannot type the date of a meeting)

evolution-data-server
[3.28.5-14]
- Resolves: #1859141 (CVE-2020-14928: Response Injection via STARTTLS in SMTP and POP3)

evolution-mapi
[3.28.3-3]
- Rebuild for samba 4.12 rebase

openchange
[2.3-26.0.1]
- Use ldconfig_scriptlets

[2.3-26]
- Add patch to build against samba 4.12

[2.3-25]
- Add patch to build against samba 4.11.2</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2020-4649.html" type="self" title="ELSA-2020-4649" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14928.html" id="CVE-2020-14928" type="cve" title="CVE-2020-14928" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="openchange" version="2.3" release="26.0.1.el8" epoch="0" arch="src">
          <filename>openchange-2.3-26.0.1.el8.src.rpm</filename>
          <sum type="sha256">7f160fd3aa62c677446426097f52f617c0114bc16f806953df12af52b5a1aa07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1892</id>
    <title>source-highlight bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[3.1.8-17]
- Add boost-devel dependecy to devel package (#1718480)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1892.html" type="self" title="ELBA-2021-1892" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="source-highlight" version="3.1.8" release="17.el8" epoch="0" arch="src">
          <filename>source-highlight-3.1.8-17.el8.src.rpm</filename>
          <sum type="sha256">9de4d21a867b2bf58cd5233c623342ca87450db7702aea81be6585ad1bc2db0b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1895</id>
    <title>libgovirt bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[0.3.7-4]
- Fix error handling in ovirt-proxy.c
  Resolves: rhbz#1910033</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1895.html" type="self" title="ELBA-2021-1895" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libgovirt" version="0.3.7" release="4.el8" epoch="0" arch="src">
          <filename>libgovirt-0.3.7-4.el8.src.rpm</filename>
          <sum type="sha256">d6783b6f9ca7a3465537b34347d3de27e7625cbc938c6eb539d8d63242f33e1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-3020</id>
    <title>xdg-desktop-portal bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-23 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[1.12.6-1.0.1]
- Fixing the segault issue in fuse session [Orabug: 32683527]

[1.12.6-1]
- Rebase to 1.12.6
Resolves: RHEL-16452</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-3020.html" type="self" title="ELBA-2024-3020" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="xdg-desktop-portal" version="1.12.6" release="1.0.1.el8" epoch="0" arch="src">
          <filename>xdg-desktop-portal-1.12.6-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">b3fa5eb5aa52d1ab4d7a87482a6b96e48e4bf0667bcf4d09462d1d22d090ba7e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-1781</id>
    <title>ModemManager bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-05 00:00:00"/>
    <updated date="2020-05-05 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>libmbim
[1.20.2-1]
- Update to 1.20.2 release

[1.20.0-1]
- Update to 1.20.0 release

libqmi
[1.24.0-1]
- Update to 1.24.0

mobile-broadband-provider-info
[20190618-1]
- Update to latest upstream release

ModemManager
[1.10.8-2]
- Fix race condition when cancelling a flash operation (rh #1758128)

[1.10.8-1]
- Update to 1.10.8 release

[1.10.6-1]
- Update to 1.10.6 release

usb_modeswitch-data
[20191128-1]
- Update to a new release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-1781.html" type="self" title="ELBA-2020-1781" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="mobile-broadband-provider-info" version="20190618" release="2.el8" epoch="0" arch="src">
          <filename>mobile-broadband-provider-info-20190618-2.el8.src.rpm</filename>
          <sum type="sha256">cf9eb89efce94c5cadde1ca8231335c6d8efa39f30329880894e6ebab7ab45f4</sum>
        </package>
        <package name="libmbim" version="1.20.2" release="1.el8" epoch="0" arch="src">
          <filename>libmbim-1.20.2-1.el8.src.rpm</filename>
          <sum type="sha256">09432b4cbd87367a17069152ea3fe888ca15bb2e0a126a5080bcdd68aba9e940</sum>
        </package>
        <package name="libqmi" version="1.24.0" release="1.el8" epoch="0" arch="src">
          <filename>libqmi-1.24.0-1.el8.src.rpm</filename>
          <sum type="sha256">d334da4f0d4778224e7fc0e71c3e52ef24c385495c72be3ba387ecb5d5306dd1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1904</id>
    <title>plymouth bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[0.9.4-9.20200615git1e36e30.0.1]
- Changed description in specfile

[0.9.4-9.git1688935]
- Fix watermark
  Resolves: #1914930

[0.9.4-8.git1688935]
- Add Recommends to pull in plymouth-theme-spinner
  Resolves: #1907422
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1904.html" type="self" title="ELBA-2021-1904" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="plymouth" version="0.9.4" release="9.20200615git1e36e30.0.1.el8" epoch="0" arch="src">
          <filename>plymouth-0.9.4-9.20200615git1e36e30.0.1.el8.src.rpm</filename>
          <sum type="sha256">cd9c4608c33315cef5e6e4fd8c0c95480f4d8e6ff51ed9304a96266b90536c69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-1791</id>
    <title>libnetfilter_cthelper bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-05 00:00:00"/>
    <updated date="2020-05-05 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.0.0-15]
- Rebuild for added CI tests

[1.0.0-14]
- Add missing backports from upstream</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-1791.html" type="self" title="ELBA-2020-1791" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libnetfilter_cthelper" version="1.0.0" release="15.el8" epoch="0" arch="src">
          <filename>libnetfilter_cthelper-1.0.0-15.el8.src.rpm</filename>
          <sum type="sha256">af3bc16d2351e8573a0f8d3b709b7c8f4742ee81e51f4af8e94c4f7c9ee7d2e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9536</id>
    <title> iniparser  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-06-30 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[4.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[4.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[4.1-2]
- Add symlinks for headers to be compitable with Debian (BZ#1635706)

[4.1-1]
- Update to 4.1 (BZ#1508863)

[4.0-6.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[4.0-5.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4.0-4.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[4.0-3.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4.0-2.20160821git]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[4.0-1.20160821git]
- Update to 4.0 [git e24843b] (#1346451)
- Spec file maintenance

[3.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[3.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[3.1-4]
- resolves: #1031119 - Fix possible crash with crafted ini files.

[3.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[3.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[3.1-1]
- Update to 3.1
- Minor spec file changes according to the latest guidelines

[3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[3.0-1]
- Final 3.0 release

[3.0-0.4.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[3.0-0.3.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[3.0-0.2.b]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[3.0-0.1.b]
- change version number to reflect 'pre-release' status

[3.0b-3]
- ensure LICENSE file is installed

[3.0b-2]
- respond to review: added -fPIC to cflags, used 'install'

[3.0b-1]
- Initial packaging attempt</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9536.html" type="self" title="ELBA-2022-9536" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="iniparser" version="4.1" release="5.el8" epoch="0" arch="src">
          <filename>iniparser-4.1-5.el8.src.rpm</filename>
          <sum type="sha256">a1576e6ee66a754c749228469d3bf7be0de430a793b7f797d896a5162e0948c1</sum>
        </package>
        <package name="iniparser" version="4.1" release="5.el8" epoch="0" arch="aarch64">
          <filename>iniparser-4.1-5.el8.aarch64.rpm</filename>
          <sum type="sha256">661fece0b764c77509a728cdc93f898f4f1fd36bdd938943c51143d6e956de08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-1948</id>
    <title>ibus-table bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.9.18-6]
- Fix a covscan error
- Related: rhbz#1929102

[1.9.18-5]
- Bump release number to add the new subpackage ibus-table-tests
- Resolves: rhbz#1929102

[1.9.18-4]
- Add gating tests to ibus-table
- Resolves: rhbz#1682163</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-1948.html" type="self" title="ELBA-2021-1948" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="ibus-table-devel" version="1.9.18" release="6.el8" epoch="0" arch="noarch">
          <filename>ibus-table-devel-1.9.18-6.el8.noarch.rpm</filename>
          <sum type="sha256">2a52923c71c5fe0ce74461dd122330848042f0a0f6842afef9071c9e99bbec04</sum>
        </package>
        <package name="ibus-table" version="1.9.18" release="6.el8" epoch="0" arch="src">
          <filename>ibus-table-1.9.18-6.el8.src.rpm</filename>
          <sum type="sha256">6dd2d81aecfa77cd8c0a801de606ef1ceb13549d946aab2759f8daf27a2f0946</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9576</id>
    <title> kronosnet  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-12-03 00:00:00"/>
    <updated date="2021-12-03 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.18-4]
Revert defrag buffer change
  Resolves: rhbz#2023847

[1.18-3]
Rebuild to, hopefully, fix tag error
  Resolves: rhbz#2008196

[1.18-3]
Calculate defrag buffers correctly
  Resolves: rhbz#2008196
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9576.html" type="self" title="ELBA-2021-9576" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="kronosnet" version="1.18" release="4.el8_5" epoch="0" arch="src">
          <filename>kronosnet-1.18-4.el8_5.src.rpm</filename>
          <sum type="sha256">bf2665bfe5d81eee6338d1240c833423eae3ca3ab8cc76d446f9572866c224cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20189</id>
    <title> edk2  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-03-20 00:00:00"/>
    <updated date="2025-03-20 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[20250102-6]
- Create new 20250102 release for OL8 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network [Orabug: 37414309] {CVE-2024-38796}
- Update to OpenSSL 3.0.15 which includes the following fixed CVEs:
  {CVE-2023-4807} {CVE-2023-5363} {CVE-2023-5678} {CVE-2023-6129} {CVE-2023-6237} {CVE-2024-0727} {CVE-2024-2511} {CVE-2024-4603} {CVE-2024-4741} {CVE-2024-5535} {CVE-2024-6119}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20189.html" type="self" title="ELBA-2025-20189" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20250102" release="6.el8" epoch="1" arch="src">
          <filename>edk2-20250102-6.el8.src.rpm</filename>
          <sum type="sha256">af87798b4b9c50e2f841c1c7fcba2e44d6e8cf2238b86a85e937dc256d5f79ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-32775</id>
    <title> edk2  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-03-20 00:00:00"/>
    <updated date="2025-03-20 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[20250102-6]
- Create new 20250102 release for OL8 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network [Orabug: 37414309] {CVE-2024-38796}
- Update to OpenSSL 3.0.15 which includes the following fixed CVEs:
  {CVE-2023-4807} {CVE-2023-5363} {CVE-2023-5678} {CVE-2023-6129} {CVE-2023-6237} {CVE-2024-0727} {CVE-2024-2511} {CVE-2024-4603} {CVE-2024-4741} {CVE-2024-5535} {CVE-2024-6119}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-32775.html" type="self" title="ELBA-2025-32775" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20250102" release="6.el8" epoch="1" arch="src">
          <filename>edk2-20250102-6.el8.src.rpm</filename>
          <sum type="sha256">af87798b4b9c50e2f841c1c7fcba2e44d6e8cf2238b86a85e937dc256d5f79ef</sum>
        </package>
        <package name="edk2-tools" version="20250102" release="6.el8" epoch="1" arch="aarch64">
          <filename>edk2-tools-20250102-6.el8.aarch64.rpm</filename>
          <sum type="sha256">1520a69e6c01fa08d40cbe700b97abad30e56b3f0291bfb5a0ff9d6d499b1c07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5931</id>
    <title>libdnf  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-13 00:00:00"/>
    <updated date="2020-11-13 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[0.48.0-5.0.2]
- Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5931.html" type="self" title="ELBA-2020-5931" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libdnf" version="0.48.0" release="5.0.2.el8" epoch="0" arch="src">
          <filename>libdnf-0.48.0-5.0.2.el8.src.rpm</filename>
          <sum type="sha256">e68b954d9c3e57771e0e16a4ee89c191564b932b499cbe1d088174d04bcbf5aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2021-1779</id>
    <title>libreoffice bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>libnumbertext
[1.0.6-2]
- rebuild to properly trigger gating

[1.0.6-1]
- latest version

liborcus
[0.15.4-2]
- Related: rhbz#1881132 update to 0.15.4

[0.15.4-1]
- Resolves: rhbz#1881132 update to 0.15.4

libreoffice
[6.4.7.2-5.0.1]
- Replace colors with Oracle colors [Orabug: 32120093]
- Build with --with-vendor='Oracle America, Inc.'
- Added the --with-hamcrest option to configure.

[1:6.4.7.2-5]
- Resolves: rhbz#1924619 bad insertion of emoji

[1:6.4.7.2-4]
- Resolves: rhbz#1889801 rebuild for poppler

[1:6.4.7.2-3]
- Related: rhbz#1874234 fix upgrade dependency problems

[1:6.4.7.2-2]
- Related: rhbz#1874234 hang in check

[1:6.4.7.2-1]
- Resolves: rhbz#1874234 latest stable release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2021-1779.html" type="self" title="ELEA-2021-1779" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libnumbertext" version="1.0.6" release="2.el8" epoch="0" arch="src">
          <filename>libnumbertext-1.0.6-2.el8.src.rpm</filename>
          <sum type="sha256">774a1cc0c067afc96c3b1b9e774feeee5cea75e62009c9a08921bd739292929c</sum>
        </package>
        <package name="liborcus" version="0.15.4" release="2.el8" epoch="0" arch="src">
          <filename>liborcus-0.15.4-2.el8.src.rpm</filename>
          <sum type="sha256">9510a080163553720dc23fff1fa1b78dd1010342c849a13c8b0a66640f40aeb4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2021-1850</id>
    <title>jbig2dec bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[0.16-1]
- Update to 0.16
  resolves: #1886011</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2021-1850.html" type="self" title="ELEA-2021-1850" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="jbig2dec" version="0.16" release="1.el8" epoch="0" arch="src">
          <filename>jbig2dec-0.16-1.el8.src.rpm</filename>
          <sum type="sha256">781f0bc2390321184baa08c5b40df0ec501c61beb7f61c0c2656c7f43a3693f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-1910</id>
    <title>cifs-utils bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-05 00:00:00"/>
    <updated date="2020-05-05 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[6.8-3]
- Add manual gating tests
- docs: cleanup rst formating
- mount.cifs.rst: document new (no)handlecache mount option
- manpage: update mount.cifs manpage with info about rdma option
- checkopts: add python script to cross check mount options
- mount.cifs.rst: document missing options, correct wrong ones
- checkopts: report duplicated options in man page
- mount.cifs.rst: more cleanups
- mount.cifs.rst: document vers=3 mount option
- mount.cifs.rst: document vers=3.02 mount option
- cifs: Allow DNS resolver key to expire
- mount.cifs: be more verbose and helpful regarding mount errors
- Update mount.cifs with vers=default mount option and SMBv3.0.2
- mount.cifs.rst: update vers=3.1.1 option description
- getcifsacl: Do not go to parse_sec_desc if getxattr fails.
- getcifsacl: Improve help usage and add -h option.
- setcifsacl: fix adding ACE when owner sid in unexpected location
- cifs.upcall: fix a compiler warning
- mount.cifs Add various missing parms from the help text
- mount.cifs: add more options to help message
- mount.cifs: detect GMT format of snapshot version
- Update man page for mount.cifs to add new options
- mount.cifs.rst: mention kernel version for snapshots
- Fix authors and maintainers</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-1910.html" type="self" title="ELBA-2020-1910" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="cifs-utils" version="6.8" release="3.el8" epoch="0" arch="src">
          <filename>cifs-utils-6.8-3.el8.src.rpm</filename>
          <sum type="sha256">847f5719e54f7ae41392c8dd4ae1d37bad16665032dff763ae8052fc5a021797</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12795</id>
    <title>edk2 security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-10-18 00:00:00"/>
    <updated date="2024-10-18 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[20240909]
- Create new 20240909 release for OL8 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
- EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
- EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
- EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12795.html" type="self" title="ELSA-2024-12795" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45236.html" id="CVE-2023-45236" type="cve" title="CVE-2023-45236" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45237.html" id="CVE-2023-45237" type="cve" title="CVE-2023-45237" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-1298.html" id="CVE-2024-1298" type="cve" title="CVE-2024-1298" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-25742.html" id="CVE-2024-25742" type="cve" title="CVE-2024-25742" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20240909" release="2.el8" epoch="1" arch="src">
          <filename>edk2-20240909-2.el8.src.rpm</filename>
          <sum type="sha256">8a28c7e032b01a9d77a3cef0bc5d187a0ebfd9f47370c3296f926443ece9cf08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-7479</id>
    <title>xdg-desktop-portal bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.8.1-1.0.1]
- Fixing the segault issue in fuse session [Orabug: 32683527]

[1.8.1-1]
- Rebase to 1.8.1
- Explicit library Requires should be arch-specific
Resolves: #2062430</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-7479.html" type="self" title="ELBA-2022-7479" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="xdg-desktop-portal" version="1.8.1" release="1.0.1.el8" epoch="0" arch="src">
          <filename>xdg-desktop-portal-1.8.1-1.0.1.el8.src.rpm</filename>
          <sum type="sha256">6beeab71e32833dbfd3cf7fbe113124706e3d5405040b0b6d6710f584940ed02</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-7483</id>
    <title>adwaita-qt bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.2.1-4]
- Rebuild (Qt 5.15.3)
  Resolves: bz#2061414</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-7483.html" type="self" title="ELBA-2022-7483" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="adwaita-qt" version="1.2.1" release="4.el8" epoch="0" arch="src">
          <filename>adwaita-qt-1.2.1-4.el8.src.rpm</filename>
          <sum type="sha256">4b0c7de50adc0a7033e8c920c750f2bb4b44af40a7378b30c77e13d08583c840</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-28600</id>
    <title>edk2 security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2024-10-18 00:00:00"/>
    <updated date="2024-10-18 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[20240909-2]
- Create new 20240909 release for OL8 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
- EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
- EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
- EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-28600.html" type="self" title="ELSA-2024-28600" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45236.html" id="CVE-2023-45236" type="cve" title="CVE-2023-45236" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45237.html" id="CVE-2023-45237" type="cve" title="CVE-2023-45237" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-1298.html" id="CVE-2024-1298" type="cve" title="CVE-2024-1298" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-25742.html" id="CVE-2024-25742" type="cve" title="CVE-2024-25742" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20240909" release="2.el8" epoch="1" arch="src">
          <filename>edk2-20240909-2.el8.src.rpm</filename>
          <sum type="sha256">8a28c7e032b01a9d77a3cef0bc5d187a0ebfd9f47370c3296f926443ece9cf08</sum>
        </package>
        <package name="edk2-tools" version="20240909" release="2.el8" epoch="1" arch="aarch64">
          <filename>edk2-tools-20240909-2.el8.aarch64.rpm</filename>
          <sum type="sha256">370e0a516acc150ef260e8c726f3f25fd9fed738d690c37d9fc3a35cf23df214</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4285</id>
    <title>libvoikko bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[4.1.1-3]
- Resolves: rhbz#1975295 Bump release number</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4285.html" type="self" title="ELBA-2021-4285" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libvoikko-devel" version="4.1.1" release="3.el8" epoch="0" arch="aarch64">
          <filename>libvoikko-devel-4.1.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">b6b9503911136c3fd4306012ab0113fef1acbd03f6223e2952cd03d37e94a41d</sum>
        </package>
        <package name="libvoikko" version="4.1.1" release="3.el8" epoch="0" arch="src">
          <filename>libvoikko-4.1.1-3.el8.src.rpm</filename>
          <sum type="sha256">425b5e45ef47c1e56101ed2869130155c0838c789067e33a72c6d56dea6c0a03</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2021-1906</id>
    <title>libyang bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.0.184-1]
- Resolves: #1910046 - [RFE] Rebase libyang to 1.0.184

[0.16.105-5]
- Related: #1780311 - Fixing a few covscan issues

[0.16.105-4]
- Resolves: #1780311 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
- Resolves: #1780313 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2021-1906.html" type="self" title="ELEA-2021-1906" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libyang" version="1.0.184" release="1.el8" epoch="0" arch="src">
          <filename>libyang-1.0.184-1.el8.src.rpm</filename>
          <sum type="sha256">8f7229246678a3ca49f9f7a4221b90e6d25f2aa0d6a26e7b3d00fc949281c842</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4295</id>
    <title>openslp bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.0.0-19]
- Move slp.spi from -server to the main package
  Resolves: #1965649</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4295.html" type="self" title="ELBA-2021-4295" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="openslp" version="2.0.0" release="19.el8" epoch="0" arch="src">
          <filename>openslp-2.0.0-19.el8.src.rpm</filename>
          <sum type="sha256">fda00843263f0a80553ac8a06c0101603e5517160ddda730dc83235404b044f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5915</id>
    <title> corosync pacemaker pcs  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-17 00:00:00"/>
    <updated date="2020-11-17 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>corosync
[3.0.3-4]
- Resolves: rhbz#1780137
- Resolves: rhbz#1791792
- Resolves: rhbz#1809864
- Resolves: rhbz#1816653

- votequorum: Ignore the icmap_get_* return value (rhbz#1780137)
- merge upstream commit cddd62f972bca276c934e58f08da84071cec1ddb (rhbz#1780137)
- man: move cmap_keys man page from section 8 to 7 (rhbz#1791792)
- merge upstream commit f1d36307e524f9440733f0b01a9fc627a0e1cac7 (rhbz#1791792)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780137)
- merge upstream commit 8ce65bf951bc1e5b2d64b60ea027fbdc551d4fc8 (rhbz#1780137)
- stats: Add stats for scheduler misses (rhbz#1791792)
- merge upstream commit 48b6894ef41e9a06ccbb696d062d86ef60dc2c4b (rhbz#1791792)
- stats: Use nanoseconds from epoch for schedmiss (rhbz#1791792)
- merge upstream commit ebd05fa00826c366922e619b012a0684c6856539 (rhbz#1791792)
- main: Add schedmiss timestamp into message (rhbz#1791792)
- merge upstream commit 35662dd0ec53f456445c30c0ef92892f47b25aa2 (rhbz#1791792)
- votequorum: Change check of expected_votes (rhbz#1809864)
- merge upstream commit 0c16442f2d93f32a229b87d2672e2dc8025ec704 (rhbz#1809864)
- quorumtool: exit on invalid expected votes (rhbz#1809864)
- merge upstream commit 5f543465bb3506b7f4929a426f1c22a9c854cecd (rhbz#1809864)
- votequorum: set wfa status only on startup (rhbz#1816653)
- merge upstream commit ca320beac25f82c0c555799e647a47975a333c28 (rhbz#1816653)

[3.0.3-3]
- Resolves: rhbz#1828295

- Add explicit spausedd dependency for revdeps CI test

[3.0.3-2]
- Related: rhbz#1745623

- New upstream release of spausedd

[3.0.3-1]
- Resolves: rhbz#1745623

- New upstream release

[3.0.2-4]
- Resolves: rhbz#1745624
- Resolves: rhbz#1745642
- Resolves: rhbz#1749263
- Resolves: rhbz#1765025

- totem: fix check if all nodes have same number of links (rhbz#1749263)
- merge upstream commit 816324c94cfb917b11f43954b8757424db28b390 (rhbz#1749263)
- totem: Increase ring_id seq after load (rhbz#1745624)
- merge upstream commit 3675daceeeeb72af043f5c051daed463fdd2d2a1 (rhbz#1745624)
- man: Fix link_mode priority description (rhbz#1745642)
- merge upstream commit 0a323ff2ed0f2aff9cb691072906e69cb96ed662 (rhbz#1745642)
- totemsrp: Reduce MTU to left room second mcast (rhbz#1765025)
- merge upstream commit ee8b8993d98b3f6af9c058194228fc534fcd0796 (rhbz#1765025)

[3.0.2-3]
- Resolves: rhbz#1738218

- Do not set exec permission for service file
- Fix CFLAGS definition

[3.0.2-2]
- Related: rhbz#1679656

- Improve spausedd test

[3.0.2-1]
- Resolves: rhbz#1705591
- Resolves: rhbz#1688889

pacemaker
[2.0.4-6]
- Fix cibsecret bug when node name is different from hostname
- Resolves: rhbz1870873

[2.0.4-5]
- Synchronize start-up and shutdown with SBD
- Resolves: rhbz1718324

[2.0.4-4]
- Allow crm_node -l/-p options to work from Pacemaker Remote nodes
- Correct action timeout value listed in log message
- Fix regression in crm_mon --daemonize with HTML output
- Resolves: rhbz1796824
- Resolves: rhbz1856035
- Resolves: rhbz1857728

[2.0.4-3]
- Allow resource and operation defaults per resource or operation type
- Rebase on upstream 2.0.4 final release
- Support on-fail='demote' and no-quorum-policy='demote' options
- Remove incorrect comment from sysconfig file
- Resolves: rhbz1628701
- Resolves: rhbz1828488
- Resolves: rhbz1837747
- Resolves: rhbz1848789

[2.0.4-2]
- Improve cibsecret help and clean up code per static analysis
- Resolves: rhbz1793860

[2.0.4-1]
- Clear leaving node's attributes if there is no DC
- Add crm_mon --node option to limit display to particular node or tagged nodes
- Add crm_mon --include/--exclude options to select what sections are shown
- priority-fencing-delay option bases delay on where resources are active
- Pending DC fencing gets 'stuck' in status display
- crm_rule can now check rule expiration when 'years' is specified
- crm_mon now formats error messages better
- Support for CIB secrets is enabled
- Rebase on latest upstream Pacemaker release
- Fix regression introduced in 8.2 so crm_node -n works on remote nodes
- Avoid infinite loop when topology is removed while unfencing is in progress
- Resolves: rhbz1300604
- Resolves: rhbz1363907
- Resolves: rhbz1784601
- Resolves: rhbz1787751
- Resolves: rhbz1790591
- Resolves: rhbz1793653
- Resolves: rhbz1793860
- Resolves: rhbz1828488
- Resolves: rhbz1830535
- Resolves: rhbz1831775

[2.0.3-5]
- Clear leaving node's attributes if there is no DC
- Resolves: rhbz1791841

[2.0.3-4]
- Implement shutdown-lock feature
- Resolves: rhbz1712584

[2.0.3-3]
- Rebase on Pacemaker-2.0.3 final release
- Resolves: rhbz1752538

[2.0.3-2]
- Rebase on Pacemaker-2.0.3-rc3
- Resolves: rhbz1752538

[2.0.3-1]
- Rebase on Pacemaker-2.0.3-rc2
- Parse crm_mon --fence-history option correctly
- Put timeout on controller waiting for scheduler response
- Offer Pacemaker Remote option for bind address
- Calculate cluster recheck interval dynamically
- Clarify crm_resource help text
- Reduce system calls after forking a child process
- Resolves: rhbz1699978
- Resolves: rhbz1725236
- Resolves: rhbz1743377
- Resolves: rhbz1747553
- Resolves: rhbz1748805
- Resolves: rhbz1752538
- Resolves: rhbz1762025

[2.0.2-3]
- Make pacemaker-cli require tar and bzip2
- Resolves: rhbz#1741580

[2.0.2-2]
- Synchronize fence-history on fenced-restart
- Cleanup leftover pending-fence-actions when fenced is restarted
- Improve fencing of remote-nodes
- Resolves: rhbz#1708380
- Resolves: rhbz#1708378
- Resolves: rhbz#1721198
- Resolves: rhbz#1695737

[2.0.2-1]
- Add stonith_admin option to display XML output
- Add new crm_rule tool to check date/time rules
- List any constraints cleared by crm_resource --clear
- crm_resource --validate can now get resource parameters from command line
- Rebase on upstream version 2.0.2
- Default concurrent-fencing to true
- Resolves: rhbz#1555939
- Resolves: rhbz#1572116
- Resolves: rhbz#1631752
pcs
[0.10.6-4.0.1]
- Replace HAM-logo.png with a generic one

[0.10.6-4]
- Fixed invalid CIB error caused by resource and operation defaults with mixed and-or rules
- Updated pcs-web-ui
- Resolves: rhbz#1867516

[0.10.6-3]
- Added Upgrade CIB if user specifies on-fail=demote
- Fixed rpmdiff issue with binary stripping checker
- Fixed removing non-empty tag by removing tagged resource group or clone
- Resolves: rhbz#1843079 rhbz#1857295

[0.10.6-2]
- Added resource and operation defaults that apply to specific resource/operation types
- Added Requires/BuildRequires: python3-pyparsing
- Added Requires: logrotate
- Fixed resource and stonith documentation
- Fixed rubygem licenses
- Fixed update_times()
- Updated rubygem rack to version 2.2.3
- Removed BuildRequires execstack (it is not needed)
- Resolves: rhbz#1805082 rhbz#1817547

[0.10.6-1]
- Rebased to latest upstream sources (see CHANGELOG.md)
- Added python bundled dependencies: dacite, dataclasses
- Added new bundled rubygem ruby2_keywords
- Updated rubygem bundled packages: backports, ethon, ffi, json, mustermann, rack, rack_protection, rack_test, sinatra, tilt
- Updated pcs-web-ui
- Updated test run, only tier0 tests are running during build
- Removed BuildRequires needed for tier1 tests which were removed for build (pacemaker-cli, fence_agents-*, fence_virt, booth-site)
- Resolves: rhbz#1387358 rhbz#1684676 rhbz#1722970 rhbz#1778672 rhbz#1782553 rhbz#1790460 rhbz#1805082 rhbz#1810017 rhbz#1817547 rhbz#1830552 rhbz#1832973 rhbz#1833114 rhbz#1833506 rhbz#1838853 rhbz#1839637

[0.10.4-6]
- Fixed communication between python and ruby daemons
- Resolves: rhbz#1783106

[0.10.4-5]
- Fixed link to sbd man page from  doc
- Fixed safe-disabling clones, groups, bundles
- Fixed sinatra wrapper performance issue
- Fixed detecting fence history support
- Fixed cookie options
- Updated hint for 'resource create ... master'
- Updated gating tests execution, smoke tests run from upstream sources
- Resolves: rhbz#1750427 rhbz#1781303 rhbz#1783106 rhbz#1793574

[0.10.4-4]
- Fix testsuite for pacemaker-2.0.3-4
- Resolves: rhbz#1792946

[0.10.4-3]
- Added basic resource views in new webUI</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5915.html" type="self" title="ELBA-2020-5915" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync" version="3.0.3" release="4.el8" epoch="0" arch="src">
          <filename>corosync-3.0.3-4.el8.src.rpm</filename>
          <sum type="sha256">6c91cd0deba0800712429075519e57217a7ff3a2162ac8f68a0a4c2c4126decd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2019-4360</id>
    <title> libyang security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2019-12-24 00:00:00"/>
    <updated date="2019-12-24 00:00:00"/>
    <rights>Copyright 2019 Oracle, Inc.</rights>
    <description>[0.16.105-3.2]
- Related: #1779573 - Fixing a few covscan issues

[0.16.105-3.1]
- Resolves: #1779573 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
- Resolves: #1779576 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2019-4360.html" type="self" title="ELSA-2019-4360" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-19333.html" id="CVE-2019-19333" type="cve" title="CVE-2019-19333" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-19334.html" id="CVE-2019-19334" type="cve" title="CVE-2019-19334" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libyang" version="0.16.105" release="3.el8_1.2" epoch="0" arch="src">
          <filename>libyang-0.16.105-3.el8_1.2.src.rpm</filename>
          <sum type="sha256">83b2e976ad3121157762a6601068b1c2727aa8172cda1f456043c869528f0a83</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-13025</id>
    <title>edk2 security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-12-06 00:00:00"/>
    <updated date="2023-12-06 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[20230821]
- Create new 20230821 release for OL8 which includes the following fixed CVEs:
  CVE-2019-14560
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735

[20230613]
- Create new 20230613.cvm release for OL8

[20230227]
- Create new 20230227.cvm release for OL8 which includes the following fixed CVEs:
  CVE-2021-38578</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-13025.html" type="self" title="ELSA-2023-13025" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4304.html" id="CVE-2022-4304" type="cve" title="CVE-2022-4304" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4450.html" id="CVE-2022-4450" type="cve" title="CVE-2022-4450" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0215.html" id="CVE-2023-0215" type="cve" title="CVE-2023-0215" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0286.html" id="CVE-2023-0286" type="cve" title="CVE-2023-0286" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20230821" release="1.el8" epoch="1" arch="src">
          <filename>edk2-20230821-1.el8.src.rpm</filename>
          <sum type="sha256">de1dcf5b222f5b2fbf246e06843878afac14b6bdbfeb58fe9f3d4bd6d90eb3fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-32791</id>
    <title>edk2 security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2023-12-06 00:00:00"/>
    <updated date="2023-12-06 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[20230821]
- Create new 20230821 release for OL8 which includes the following fixed CVEs:
  CVE-2019-14560
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735

[20230613]
- Create new 20230613.cvm release for OL8

[20230227]
- Create new 20230227.cvm release for OL8 which includes the following fixed CVEs:
  CVE-2021-38578</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-32791.html" type="self" title="ELSA-2023-32791" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4304.html" id="CVE-2022-4304" type="cve" title="CVE-2022-4304" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4450.html" id="CVE-2022-4450" type="cve" title="CVE-2022-4450" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0215.html" id="CVE-2023-0215" type="cve" title="CVE-2023-0215" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0286.html" id="CVE-2023-0286" type="cve" title="CVE-2023-0286" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="edk2" version="20230821" release="1.el8" epoch="1" arch="src">
          <filename>edk2-20230821-1.el8.src.rpm</filename>
          <sum type="sha256">de1dcf5b222f5b2fbf246e06843878afac14b6bdbfeb58fe9f3d4bd6d90eb3fc</sum>
        </package>
        <package name="edk2-tools" version="20230821" release="1.el8" epoch="1" arch="aarch64">
          <filename>edk2-tools-20230821-1.el8.aarch64.rpm</filename>
          <sum type="sha256">391404444ddd168c5dcec2312b4839acae9d23fae70cd72f79c1ac720aad75f3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-1671</id>
    <title>fprintd and libfprint bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-05 00:00:00"/>
    <updated date="2020-05-05 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>fprintd
[1.90.0-0.20191121gitf022902]
- git snapshot build of fprintd 1.90.0
- Resolves: rhbz1740752

libfprint
[1.90.0-4]
- Add patch to fix unit-test failure

[1.90.0-3]
- Pull in upstream fixes from the not-yet released 1.90.1
- Related: rhbz1791256

[1.90.0-2]
- Add patch to remove debug spew from udev rules
- Add patch to fix compilation error
- Related: rhbz1740752

[1.90.0-1]
+ libfprint-1.90.0-1
- Update to 1.90.0
- Resolves: rhbz1740752</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-1671.html" type="self" title="ELEA-2020-1671" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libfprint" version="1.90.0" release="4.el8" epoch="0" arch="src">
          <filename>libfprint-1.90.0-4.el8.src.rpm</filename>
          <sum type="sha256">295018eb107b62475049f0be40058cb9ff1660e1f6faf9a4781adc3e08247e99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12411</id>
    <title>libreport  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-06-13 00:00:00"/>
    <updated date="2023-06-13 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.9.5-15.0.4]
- Update bug reporting URLs [Orabug: 35483412]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12411.html" type="self" title="ELBA-2023-12411" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libreport" version="2.9.5" release="15.0.4.el8" epoch="0" arch="src">
          <filename>libreport-2.9.5-15.0.4.el8.src.rpm</filename>
          <sum type="sha256">b8f42a3e51ecaca3128de6a4c1c898b364fdceddf55536e73344d8ba5c15f752</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-1586</id>
    <title> GNOME security, bug fix, and enhancement update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>accountsservice
[0.6.55-1]
- Rebase to 0.6.55
  Resolves: #1846376

atkmm
[2.24.2-7]
- Rebuild for annobin fixes
- Resolves: rhbz#1703969

cairomm
[1.12.0-8]
- Rebuild for the annobin fixes
- Resolves: rhbz#1703971

chrome-gnome-shell
[10.1-7]
- Disable updates support
  Resolves: #1802105

dleyna-core
[0.6.0-3]
- Dont remove a queue more than once
- Remove any pending task processing handlers when destroying a queue
Resolves: #1464902

dleyna-server
[0.6.0-3]
- Avoid crash when getting server properties
Resolves: #1464902

enchant2
[2.2.3-3]
- Rebuild for the annobin fixes
- Resolves: rhbz#1703990

gamin
[0.1.10-32]
- Add a comment clarifying the license (rhbz#1096200)

gdm
[3.28.3-39]
- Ensure login screen display server is is killed at log in
- Pull in fixes for two security issues
  Resolves: #1918391

[3.28.3-38]
- Re-add disabling Wayland for server GPUs
  Related: #1670273

[3.28.3-35]
- Stop disabling Wayland for server GPUs
  Related: #1670273

geoclue2
[2.5.5-2]
- Fix multilib conflicts in -devel subpackage (#1853141)

geocode-glib
[3.26.0-3]
- Rebuild against fixed gtk-doc to fix another multilib conflict (#1853142)

[3.26.0-2]
- Fix multilib conflicts in -devel subpackage (#1853142)

gjs
[1.56.2-5]
- Fix undefined property warnings
  Related: #1845660

glib2
[2.56.4-9]
- Update GHmac patch to implement g_hmac_copy()
  Resolves: #1786538
- Update keyfile settings backend
  Resolves: #1728896
- Fix CVE-2019-13012
  Resolves: #1728632

glibmm24
[2.56.0-2]
- Rebuild for the annobin fixes
- Resolves: rhbz#1704002

gnome-boxes
[3.36.5-8.0.1]
- Add Oracle Linux 8.3 and 8.4 for VM template [Orabug: 32013221] [Orabug: 32840088]

[3.36.5-8]
- Pass discard 'unmap' to supported disk drivers
- Related: #1152037

[3.36.5-7]
- Fix mixing VM widgets
- Related: #1639163

gnome-control-center
[3.28.2-27]
- Update fr, ja, zh_CN translations
- Resolves: #1876291

[3.28.2-26]
- Support Simple Content Access from subscription manager
  Related: #1870837

[3.28.2-25]
- Fix a leak found by Coverity
- Related: #1700002

[3.28.2-24]
- Fix crashes when updating printer entries
- Related: #1700002
- Resolves: #1903043

[3.28.2-23]
- Update list of printers instead of regenerating it
- Resolves: #1700002

gnome-online-accounts
[3.28.2-2]
- Rebuild to fix multilib issues
  Resolves: #1765627

gnome-photos
[3.28.1-4]
- Add a manual
Resolves: #1612779

gnome-settings-daemon
[3.32.0-14]
- Update fr, ja, zh_CN translations
- Resolves: #1876291

[3.32.0-13]
- Add back subscription-manager plugin
  Related: #1870837

[3.32.0-12]
- Handle org.gnome.Shell.Screencast Stopped signal
  Related: #1705392

gnome-shell
[3.32.2-30]
- Backport of touch mode
  Resolves: #1833787

[3.32.2-29]
- Refuse to override system extensions
  Related: #1802105

[3.32.2-28]
- Backport extension updates support
  Related: #1802105

[3.32.2-27]
- Default to printing JS backtrace on segfaults
  Resolves: #1883868

[3.32.2-26]
- Backport OSK fixes
  Resolves: #1871041

[3.32.2-25]
- Stop screen recording on monitor changes
  Resolves: #1705392

[3.32.2-24]
- Handle workspace from startup notification
  Resolves: #1671761

[3.32.2-23]
- Work around aggressive garbage collection
  Related: #1881312

[3.32.2-22]
- Wake up lock screen when deactivated programmatically
  Resolves: #1854290
- Backport better caps-lock warning
  Resolves: #1861357
- Fix more (harmless) JS warnings
  Resolves: #1881312

[3.32.2-21]
- Fix JS warning in AuthList downstream patch
  Resolves: #1860946

gnome-shell-extensions
[3.32.1-14]
- Use same logic than Nautilus for double click/tap in desktop-icons extension
  Resolves: #1842229

[3.32.1-13]
- Update Japanese translation
  Related: #1865718

[3.32.1-12]
- Adjust gettext locale in desktop-icons extension
  Resolves: #1865718

gnome-software
[3.36.1-5]
- Fix flatpak updates and removals when same ref occurs in multiple remotes
- Resolves: #1888407

gnome-terminal
[3.28.3-3]
- Support using the '0', '+' and '-' keys from the numeric keypad as
  accelerators
- Resolves: #837035

gtk-doc
[1.28-3]
- Backport an upstream patch to fix G_MAXINT appearing as G_MAXLONG on 32 bit
- Related: #1853142

gtkmm24
[2.24.5-6]
- Rebuild for the annobin fixes
- Resolves: rhbz#1704012

gtkmm30
[3.22.2-3]
- Rebuild for the annobin fixes
- Resolves: rhbz#1704013

gvfs
[1.36.2-11]
- Add support for certificates prompts for GOA mounts (rhbz#1889411)

libdazzle
[3.28.5-2]
- Rebuild to ship libdazzle-devel in CRB
- Resolves: #1919429

libepubgen
[0.1.0-3]
- Resolves: rhbz#1919432 bump n-v-r and rebuild

libsass
[3.4.5-6]
- Rebuild for the annobin fixes
- Resolves: rhbz#1704058

libsigc++20
[2.10.0-6]
- Rebuild for the annobin fixes
- Resolves: rhbz#1704059

libvisual
[1:0.4.0-25]
- Fix multilib conflicts in lvconfig.h
- Resolves: #1853155

mutter
[3.32.2-57]
- Backport touch-mode
  Resolves: #1833787

[3.32.2-56]
- Backport geometric picking patches
  Resolves: #1919467

[3.32.2-55]
- Fix slow nouveau with llvmpipe
  Resolves: #1921151

[3.32.2-54]
- Fix polyinstantiation patch backport
  Resolves: #1861769

[3.32.2-53]
- Fix test case backport
  Related: #1786496

[3.32.2-52]
- Support polyinstantiation
  Resolves: #1861769
- Mitigate nouveau misidentifying connectors
  Resolves: #1786496

[3.32.2-51]
- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1886034

[3.32.2-50]
- Fix GLX stereo buffer rebase error
  Resolves: #1889528

[3.32.2-49]
- Add tile based shadow buffer damage tracking
  Resolves: #1670273

nautilus
[3.28.1-15]
- Fix activation_uri handling to prevent invalid bookmarks (rhbz#1906499)

OpenEXR
[2.2.0-12]
- In check, dont override PKG_CONFIG_PATH from the environment (#1907528)

pangomm
[2.40.1-6]
- Rebuild for the annobin fixes
- Resolves: rhbz#1704100

soundtouch
[2.0.0-3]
- Rebuild for the annobin fixes
- Remove an unused patch
- Resolves: rhbz#1704123

vala
[0.40.19-2]
- Fix multilib conflicts in vala-gen-introspect
- Resolves: #1853170

webkit2gtk3
[2.30.4-1]
- Update to 2.30.4
- Related: #1883304

[2.30.3-1]
- Update to 2.30.3
- Related: #1883304

[2.30.2-2]
- Try to fix coverity build by disabling docs (thanks to Kamil Dudka &lt;kdudka@redhat.com&gt;!)
- Related: #1883304

[2.30.2-1]
- Update to 2.30.2
- Related: #1883304

[2.30.1-1]
- Update to 2.30.1
- Related: #1883304

woff2
[1.0.2-5]
- Resolves: rhbz#1919435 bump NVR for rebuild</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-1586.html" type="self" title="ELSA-2021-1586" />
      <reference href="https://linux.oracle.com/cve/CVE-2019-13012.html" id="CVE-2019-13012" type="cve" title="CVE-2019-13012" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-13543.html" id="CVE-2020-13543" type="cve" title="CVE-2020-13543" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-13584.html" id="CVE-2020-13584" type="cve" title="CVE-2020-13584" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9948.html" id="CVE-2020-9948" type="cve" title="CVE-2020-9948" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9951.html" id="CVE-2020-9951" type="cve" title="CVE-2020-9951" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-9983.html" id="CVE-2020-9983" type="cve" title="CVE-2020-9983" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="dleyna-core" version="0.6.0" release="3.el8" epoch="0" arch="src">
          <filename>dleyna-core-0.6.0-3.el8.src.rpm</filename>
          <sum type="sha256">e8652db981237a52cb15dc176b1fd5e38065551f169da96bbb9c3407ff7fdf0b</sum>
        </package>
        <package name="gnome-settings-daemon" version="3.32.0" release="14.el8" epoch="0" arch="src">
          <filename>gnome-settings-daemon-3.32.0-14.el8.src.rpm</filename>
          <sum type="sha256">77768f2814e10dba52c61bce394ed54ea30ea28ee4c66be28de53a6ff7a3228c</sum>
        </package>
        <package name="dleyna-core" version="0.6.0" release="3.el8" epoch="0" arch="aarch64">
          <filename>dleyna-core-0.6.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">78e6d1678c9207c9a83a1d182d2d1fd07e8b11dfb48426cf490b21d195b9c26e</sum>
        </package>
        <package name="gdm" version="3.28.3" release="39.el8" epoch="1" arch="src">
          <filename>gdm-3.28.3-39.el8.src.rpm</filename>
          <sum type="sha256">84ab090a156fe347a3d4976bcd0000e34525e18fb2d299a746e1e7d7ae869f91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4334</id>
    <title>plymouth bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[0.9.4-10.20200615git1e36e30.0.1]
- Changed description in specfile

[0.9.4-10.git1688935]
- Stop using /var/run, just use /run instead
  Resolves: #1977446
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4334.html" type="self" title="ELBA-2021-4334" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="plymouth" version="0.9.4" release="10.20200615git1e36e30.0.1.el8" epoch="0" arch="src">
          <filename>plymouth-0.9.4-10.20200615git1e36e30.0.1.el8.src.rpm</filename>
          <sum type="sha256">76bed09839dfb3f9dc50fc64ef98214fc5bd2c6a2dc9dc4a6e22d2165da9035c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-7573</id>
    <title>pacemaker bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[2.1.4-5.0.1]
- Upstream reference in pacemaker crm_report binary [Orabug: 32825154]
- Replace bug url [Orabug: 34202300]

[2.1.4-5]
- Fix regression in crm_resource -O
- Resolves: rhbz2118337

[2.1.4-4]
- Ensure all nodes are re-unfenced after device configuration change
- crm_resource --why now checks node health status
- Resolves: rhbz1872483
- Resolves: rhbz2065818

[2.1.4-3]
- Add support for ACL groups
- Resolves: rhbz1724310

[2.1.4-2]
- Restore crm_attribute query behavior when attribute does not exist
- Resolves: rhbz2072107

[2.1.4-1]
- Fencer should not ignore CIB updates when stonith is disabled
- Rebase pacemaker on upstream 2.1.4 final release
- Fix typo in ocf:pacemaker:HealthSMART meta-data
- Resolves: rhbz2055935
- Resolves: rhbz2072107
- Resolves: rhbz2094855

[2.1.3-2]
- crm_attribute works on remote node command line when hostname differs
- Rebase pacemaker on upstream 2.1.3 final release
- Resolves: rhbz1384172
- Resolves: rhbz2072107

[2.1.3-1]
- crm_resource --restart fails to restart clone instances except instance 0
- Add new multiple-active option for stop unexpected instances
- Unable to show metadata for service agents with @ and . in the name
- Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
- Allow resource meta-attribute to exempt resource from node health restrictions
- Show node health states in crm_mon
- Rebase pacemaker on upstream 2.1.3-rc2 release
- crm_mon API result does not validate against schema if fence event has exit-reason
- Resolves: rhbz1930578
- Resolves: rhbz2036815
- Resolves: rhbz2045096
- Resolves: rhbz2049722
- Resolves: rhbz2059638
- Resolves: rhbz2065812
- Resolves: rhbz2072107
- Resolves: rhbz2086230</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-7573.html" type="self" title="ELBA-2022-7573" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="pacemaker" version="2.1.4" release="5.0.1.el8" epoch="0" arch="src">
          <filename>pacemaker-2.1.4-5.0.1.el8.src.rpm</filename>
          <sum type="sha256">25e405ae721252b00d3ca0d04c12b488f2968178502db460fd62b6712980f3b2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2020-5946</id>
    <title> kronosnet  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-11-23 00:00:00"/>
    <updated date="2020-11-23 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.16-1]
Rebase to 1.16
  Resolves: rhbz#1796503

[1.15-1]
Rebase to 1.15
  Resolves: rhbz#1796503
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2020-5946.html" type="self" title="ELBA-2020-5946" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="kronosnet" version="1.16" release="1.el8" epoch="0" arch="src">
          <filename>kronosnet-1.16-1.el8.src.rpm</filename>
          <sum type="sha256">e9f774f8890e7d65ea22fc246e9adcad25cdf867ec68d2693ae9bdfc8f189606</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-64494</id>
    <title> libuninameslist  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-13 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[20180701-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[20180701-1]
- Update to 20180701 version (#1564872)

[20180408-1]
- Update to 20180408 version (#1564872)

[20170701-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[20170701-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[20170701-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[20170701-1]
- Update to 20170701 version

[20170319-1]
- Update to 20170319 version

[20160701-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[20160701-1]
- Update to 20160701. Fixes bug #1352498</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-64494.html" type="self" title="ELBA-2026-64494" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libuninameslist" version="20180701" release="2.el8" epoch="0" arch="aarch64">
          <filename>libuninameslist-20180701-2.el8.aarch64.rpm</filename>
          <sum type="sha256">a666c84b3ab2f6cfaa56eb60eb76ef87e016d0630e7ac407cb40eae34bffc614</sum>
        </package>
        <package name="libuninameslist" version="20180701" release="2.el8" epoch="0" arch="src">
          <filename>libuninameslist-20180701-2.el8.src.rpm</filename>
          <sum type="sha256">1d008d8c01439607128d3c0b5156fa00c8b24e586efa55ae84a41c8fc89d208e</sum>
        </package>
        <package name="libuninameslist-devel" version="20180701" release="2.el8" epoch="0" arch="aarch64">
          <filename>libuninameslist-devel-20180701-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9550e6731458f016dbff45720f3fddd05666656f75de089feb0bf6b2b2079210</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-14041</id>
    <title> pycairo-epel Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-04-04 00:00:00"/>
    <updated date="2022-04-04 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[1.16.3-6]
- Convert RHEL8 pycairo to pycairo-epel with just python3-cairo-devel subpackage
- Related: rhbz#2053665

[1.16.3-6]
- Rebuild due of python2-pycairo for GIMP (RCM-39388)

[1.16.3-3]
- Remove the python2 subpackages
  https://bugzilla.redhat.com/show_bug.cgi?id=1590820

[1.16.3-2]
- Allow Python 2 for build
  See: https://hurl.corp.redhat.com/rhel8-py2

- Skip tests on Python 2 (python2-pytest is being removed)

[1.16.3-1]
- Update to 1.16.3

[1.16.1-1]
- Update to 1.16.1

[1.16.0-1]
- Update to 1.16.0

[1.15.6-1]
- Update to 1.15.6

[1.15.4-1]
- Update to 1.15.4

[1.15.3-1]
- Update to 1.15.3

[1.15.2-1]
- Update to 1.15.2
- Switch to new upstream at https://github.com/pygobject/pycairo
- Switch to distutils build system
- Tighten subpackage deps with the _isa macro
- Rename Python 2 package to python2-cairo
- Enable Python 3 support</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-14041.html" type="self" title="ELBA-2022-14041" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="python3-cairo-devel" version="1.16.3" release="6.el8" epoch="0" arch="aarch64">
          <filename>python3-cairo-devel-1.16.3-6.el8.aarch64.rpm</filename>
          <sum type="sha256">09789c4a123033b804c8cf8ae8f3f92c707a8958527e3354e50521415ac2c31b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="enhancement" version="1" from="el-errata@oss.oracle.com">
    <id>ELEA-2020-1808</id>
    <title>libndp bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2020-05-05 00:00:00"/>
    <updated date="2020-05-05 00:00:00"/>
    <rights>Copyright 2020 Oracle, Inc.</rights>
    <description>[1.7-3]
- ndptool: add -D dest support (rhbz 1697595)
- ndptool: fix potential memory leak caused by strdup (rhbz 1697595)

[1.7-2]
- ndptool: add -T target support (rhbz 1666194)
- ndptool: fix target parameter typo (rhbz 1666194)
- libndp: close sockfd after using to avoid handle leak (rhbz 1666194)
- libndp: fix nd_msg typo when setting target address (rhbz 1666194)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELEA-2020-1808.html" type="self" title="ELEA-2020-1808" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libndp" version="1.7" release="3.el8" epoch="0" arch="src">
          <filename>libndp-1.7-3.el8.src.rpm</filename>
          <sum type="sha256">137b3baac95981caa64480e6fac57bcd4cbc05630bcd6e7209ffe96fa5c1a7a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4354</id>
    <title>libndp bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[1.7-6]
- Bump the version number due to conflict with (rhbz 1937721)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4354.html" type="self" title="ELBA-2021-4354" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libndp" version="1.7" release="6.el8" epoch="0" arch="src">
          <filename>libndp-1.7-6.el8.src.rpm</filename>
          <sum type="sha256">b18b8739eb626bd848ff6c0660f4992efee9814920a3c23ebf1450a131e62e5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-1647</id>
    <title> samba security, bug fix, and enhancement update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>openchange
[2.3-27.0.1]
- Use ldconfig_scriptlets

[2.3-27]
- Rebuild for newer samba

samba
[4.13.3-3]
- resolves: #1924615 - Fix a memcache bug when cache is full
- resolves: #1924571 - Ensure that libwbclient has been updated before
                       restarting services

[4.13.3-2]
- resolves: #1909647 - Fix winbind in trust scenarios with connection issues

[4.13.3-1]
- related: #1878109 - Rebase Samba to version 4.13.3

[4.13.2-5]
- resolves: #1904174 - Fix ldap timeout with 'net ads join'

[4.13.2-4]
- resolves: #1902198 - Document weak crypto output of testparm

[4.13.2-3]
- resolves: #1899113 - Fix following dfs links with smb clients

[4.13.2-2]
- related: #1869702 - Fix spoolss crash
- resolves: #1896736 - Fix name lookups of FreeIPA users
- resolves: #1899113 - Fix DFS links

[4.13.2-1]
- resolves: #1878109 - Rebase Samba to version 4.13.2
- resolves: #1872833 - Add samba-winexe subpackage
- resolves: #1891688 - Fix CVE-2020-14323
- resolves: #1892633 - Fix CVE-2020-14318
- resolves: #1892639 - Fix CVE-2020-14383
- resolves: #1879835 - Fix CVE-2020-1472
- resolves: #1888990 - Update smb.conf manpages to describe how to apply
                       config changes.
- resolves: #1869702 - Fix %U substitution for 'valid users' option
- resolves: #1818038 - Improve FIPS compliance
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-1647.html" type="self" title="ELSA-2021-1647" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14318.html" id="CVE-2020-14318" type="cve" title="CVE-2020-14318" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14323.html" id="CVE-2020-14323" type="cve" title="CVE-2020-14323" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-1472.html" id="CVE-2020-1472" type="cve" title="CVE-2020-1472" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="openchange" version="2.3" release="27.0.1.el8" epoch="0" arch="src">
          <filename>openchange-2.3-27.0.1.el8.src.rpm</filename>
          <sum type="sha256">1ad5724f2efe899fa56f86484a2bd95f4bdd926ffda27db8fb0ace08ffc7ff7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-7533</id>
    <title>cheese bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description> </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-7533.html" type="self" title="ELBA-2022-7533" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="cheese" version="3.28.0" release="4.el8" epoch="2" arch="src">
          <filename>cheese-3.28.0-4.el8.src.rpm</filename>
          <sum type="sha256">c78c3fbffdc30b2de2fe8a36a48c3125611e84de68d8b4a8e095dabcca840af3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4435</id>
    <title>sssd bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.5.2-2.0.1]
- Restore default debug level for sss_cache [Orabug: 32810448]
- Restore default debug level for shadow-utils tools [Orabug: 32810448]
- Revert Redhats change of disallowing duplicated incomplete gid
  when 'id_provider=ldap' is used, which caused regression in AD
  environment. [Orabug: 29286774] [Doc ID 2605732.1]

[2.5.2-2]
- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization

[2.5.2-1]
- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for originalADgidNumber
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade

[2.5.1-2]
- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)

[2.5.1-1]
- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf

[2.5.0-1]
- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
- Resolves: rhbz#1948657 - pam_sss_gss.so doesnt work with large kerberos tickets
- Resolves: rhbz#1949149 - [RFE] Poor mans backtrace
- Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
- Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
- Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
- Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
- Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
- Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
- Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
- Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
- Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
- Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
- Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels('first factor' / 'second factor') on GDM login and screensaver unlock screen
- Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
- Resolves: rhbz#1890177 - Clarify 'single_prompt' option in 'PROMPTING CONFIGURATION SECTION' section of sssd.conf man page
- Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
- Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
- Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
- Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
- Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4435.html" type="self" title="ELBA-2021-4435" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="sssd" version="2.5.2" release="2.0.1.el8" epoch="0" arch="src">
          <filename>sssd-2.5.2-2.0.1.el8.src.rpm</filename>
          <sum type="sha256">2212b2c9e8aa32352caad251ff53e2e0deb393650ef2bccce1e05a8f77141118</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-14819</id>
    <title> python-fasteners Bug Fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-01 00:00:00"/>
    <updated date="2022-06-01 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>  </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-14819.html" type="self" title="ELBA-2022-14819" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="python3-fasteners" version="0.17" release="2.el8" epoch="0" arch="noarch">
          <filename>python3-fasteners-0.17-2.el8.noarch.rpm</filename>
          <sum type="sha256">cbe59d7056dbb11bc54c48eb8f2594f62eeb643a47b6da1432504a3209e5a493</sum>
        </package>
        <package name="python-fasteners" version="0.17" release="2.el8" epoch="0" arch="src">
          <filename>python-fasteners-0.17-2.el8.src.rpm</filename>
          <sum type="sha256">ca4ba32f4a32c099997659afc8bc76a86270aac64bc70a4bfc8f2a7890fedfd3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-2818</id>
    <title> pacemaker  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-29 00:00:00"/>
    <updated date="2023-05-29 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.1.5-8.0.1]
- Upstream reference in pacemaker crm_report binary [Orabug: 32825154]
- Replace bug url [Orabug: 34202300]

[2.1.5-8]
- Rebuild with new release due to build system problems
- Related: rhbz2168249
- Related: rhbz2168675

[2.1.5-7]
- Additional fixes for SIGABRT during pacemaker-fenced shutdown
- Backport fix for attrd_updater -QA not displaying all nodes
- Related: rhbz2168249
- Resolves: rhbz2168675

[2.1.5-6]
- Backport fix for migration history cleanup causing resource recovery
- Backport fix for SIGABRT during pacemaker-fenced shutdown
- Resolves: rhbz2166388
- Resolves: rhbz2168249

[2.1.5-5]
- Backport fix for remote node shutdown regression
- Resolves: rhbz2163567

[2.1.5-4]
- Rebase pacemaker on upstream 2.1.5 final release
- Add support for sync points to attribute daemon
- Resolves: rhbz1463033
- Resolves: rhbz1866578
- Resolves: rhbz2122352

[2.1.5-3]
- Fix errors found by covscan
- Related: rhbz2122352

[2.1.5-2]
- Rebase on upstream 2.1.5-rc3 release
- Resolves: rhbz1626546
- Related: rhbz2122352

[2.1.5-1]
- Rebase on upstream 2.1.5-rc2 release
- Resolves: rhbz1822125
- Resolves: rhbz2095662
- Resolves: rhbz2121852
- Resolves: rhbz2122806
- Resolves: rhbz2133497
- Resolves: rhbz2142681</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-2818.html" type="self" title="ELBA-2023-2818" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="pacemaker" version="2.1.5" release="8.0.1.el8" epoch="0" arch="src">
          <filename>pacemaker-2.1.5-8.0.1.el8.src.rpm</filename>
          <sum type="sha256">b7029d9d4e9ca6ab7a080d3982fb474f1aca22bdbcb6128fc60147ae19fb2473</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-1804</id>
    <title> userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>egl-wayland
[1.1.5-3]
- Add upstream patch to address rhbz#1842473

[1.1.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.1.5-1]
- Update to 1.1.5

libdrm
[2.4.103-1]
- Update to 2.4.103

libglvnd
[1.3.2-1]
- Update to 1.3.2 release

libinput
[1.16.3-1]
- libinput 1.16.3 (#1886648)

libwacom
[1.6-2]
- Add Lenovo tablet files from upstream (#1914411)

[1.6-1]
- libwacom 1.6 (#1878160)

libX11
[1.6.8-4]
- Fix CVE-2020-14363 (#1873923)

mesa
[20.3.3-2]
- Fix CPU affinity memory corruption crash (#1938788)

[20.3.3-1]
- Update to 20.3.3 + upstream fixes for qemu regression

[20.3.2-1]
- Update to 20.3.2 for upstream fixes

[20.3.1-1]
- Update to 20.3.1 for radeon fix

[20.3.0-2]
- Fix regression with radeon si/cik cards

[20.3.0-1]
- Update to 20.3.0 release

[20.3.0-0.1.rc2]
- Update 20.3.0-rc2
- enable lavapipe behind env var so it can be used for testing

xorg-x11-drivers
[7.7-30]
- Dont Require wacom on s390x, thats just silly

[7.7-29]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[7.7-28]
- Drop geode, since F31+ no longer supports the associated CPU

[7.7-27]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[7.7-26]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[7.7-25]
- enable on s390x (related #1727029)

[7.7-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[7.7-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

xorg-x11-server
[1.20.10-1]
- xserver 1.20.10
  Resolves: #1891871

[1.20.8-10]
- modesetting: keep going if a modeset fails on EnterVT
  Resolves: #1838392

[1.20.8-9]
- CVE fix for: CVE-2020-14347 (#1862320)

[1.20.8-8]
- CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
  CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)

[1.20.8-7]
- Enable XC-SECURITY
  Resolves: #1863142</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-1804.html" type="self" title="ELSA-2021-1804" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14344.html" id="CVE-2020-14344" type="cve" title="CVE-2020-14344" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14345.html" id="CVE-2020-14345" type="cve" title="CVE-2020-14345" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14346.html" id="CVE-2020-14346" type="cve" title="CVE-2020-14346" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14347.html" id="CVE-2020-14347" type="cve" title="CVE-2020-14347" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14360.html" id="CVE-2020-14360" type="cve" title="CVE-2020-14360" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14361.html" id="CVE-2020-14361" type="cve" title="CVE-2020-14361" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14362.html" id="CVE-2020-14362" type="cve" title="CVE-2020-14362" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-14363.html" id="CVE-2020-14363" type="cve" title="CVE-2020-14363" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25712.html" id="CVE-2020-25712" type="cve" title="CVE-2020-25712" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="egl-wayland" version="1.1.5" release="3.el8" epoch="0" arch="src">
          <filename>egl-wayland-1.1.5-3.el8.src.rpm</filename>
          <sum type="sha256">6c680987e930dbd22af7b922621c726bcafdfbfe08bb8a5c3446e788d4137380</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2021-1842</id>
    <title> raptor2 security and bug fix update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-25 00:00:00"/>
    <updated date="2021-05-25 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.0.15-16]
- Resolves: rhbz#1900904 CVE-2020-25713 raptor2: malformed input file can lead to a segfault

[2.0.15-15]
- Resolves: rhbz#1896534 CVE-2017-18926 raptor: heap-based buffer overflow

[2.0.15-14]
- Resolves: rhbz#1896340 Suppress documentation in Flatpak builds</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2021-1842.html" type="self" title="ELSA-2021-1842" />
      <reference href="https://linux.oracle.com/cve/CVE-2017-18926.html" id="CVE-2017-18926" type="cve" title="CVE-2017-18926" />
      <reference href="https://linux.oracle.com/cve/CVE-2020-25713.html" id="CVE-2020-25713" type="cve" title="CVE-2020-25713" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="raptor2-devel" version="2.0.15" release="16.el8" epoch="0" arch="aarch64">
          <filename>raptor2-devel-2.0.15-16.el8.aarch64.rpm</filename>
          <sum type="sha256">27fb7a3583b00e42d6edb44d9fc5133d4cc1deef76ff678d67407021d87e0d1a</sum>
        </package>
        <package name="raptor2" version="2.0.15" release="16.el8" epoch="0" arch="src">
          <filename>raptor2-2.0.15-16.el8.src.rpm</filename>
          <sum type="sha256">dd1871ff4c6c94bee31e04add087c17249279c5bd30eac0b897ea53cb6e23961</sum>
        </package>
        <package name="raptor2" version="2.0.15" release="16.el8" epoch="0" arch="aarch64">
          <filename>raptor2-2.0.15-16.el8.aarch64.rpm</filename>
          <sum type="sha256">a08954468a40d1d923ec2c43d0113ee5f7ef6eddcd595907ae08fd9824d60f65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-7567</id>
    <title>evolution-mapi bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-11-15 00:00:00"/>
    <updated date="2022-11-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>evolution-mapi
[3.28.3-6]
- Related: #2081620 (Rebuild for samba 4.16 rebase)

openchange
[2.3-30.0.1]
- Use ldconfig_scriptlets

[2.3-30]
- Related: #2081620 - Rebuild for samba rebase to 4.16.x</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-7567.html" type="self" title="ELBA-2022-7567" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="openchange" version="2.3" release="30.0.1.el8" epoch="0" arch="src">
          <filename>openchange-2.3-30.0.1.el8.src.rpm</filename>
          <sum type="sha256">8eb8012626c7bcfb0cd362a782e8d79cd62e63cee0049e7a83f181fb993e96e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-2887</id>
    <title> corosync  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-29 00:00:00"/>
    <updated date="2023-05-29 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[3.1.7-1]
- Resolves: rhbz#2135860

- New upstream release (rhbz#2135860)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-2887.html" type="self" title="ELBA-2023-2887" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync" version="3.1.7" release="1.el8" epoch="0" arch="src">
          <filename>corosync-3.1.7-1.el8.src.rpm</filename>
          <sum type="sha256">1145f7e99ce5ad4bc1d13a649605b86b68967b2058bf7b0e466e90691dadb9af</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-4437</id>
    <title>libldb bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-11-16 00:00:00"/>
    <updated date="2021-11-16 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[2.3.0-2]
- related: rhbz#1897082 - Fix libldb tests on ppc64le

[2.3.0-1]
- resolves: rhbz#1945021 - Update to version 2.3.0
- resolves: rhbz#1897082 - Fix libldb tests on aarch64</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-4437.html" type="self" title="ELBA-2021-4437" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="libldb" version="2.3.0" release="2.el8" epoch="0" arch="src">
          <filename>libldb-2.3.0-2.el8.src.rpm</filename>
          <sum type="sha256">07ff621d06e9963a509175c17dfba4108c0570f5584587848b2cfe33462375cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2021-9243</id>
    <title> corosync-qdevice  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2021-05-26 00:00:00"/>
    <updated date="2021-05-26 00:00:00"/>
    <rights>Copyright 2021 Oracle, Inc.</rights>
    <description>[3.0.1-1]
- Resolves: rhbz#1752386
- Resolves: rhbz#1879351

- New upstream release</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2021-9243.html" type="self" title="ELBA-2021-9243" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync-qdevice" version="3.0.1" release="1.el8" epoch="0" arch="src">
          <filename>corosync-qdevice-3.0.1-1.el8.src.rpm</filename>
          <sum type="sha256">88715fc9f0fa8fcacce34b1df9ad80abf0668c25a7a53c1331f87929c17a3d49</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-3014</id>
    <title>corosync bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-23 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[3.1.8-1]
- Resolves: RHEL-15263

- New upstream release (RHEL-15263)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-3014.html" type="self" title="ELBA-2024-3014" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="corosync" version="3.1.8" release="1.el8" epoch="0" arch="src">
          <filename>corosync-3.1.8-1.el8.src.rpm</filename>
          <sum type="sha256">f548c5fb64cdb88974ebe088fd5aec99b45cdf3584873dc9176764dd7594c692</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-2897</id>
    <title>abrt bug fix and enhancement update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-05-23 00:00:00"/>
    <updated date="2023-05-23 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[2.10.9-24.0.1]
- abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm [Orabug: 34184473]
- Disable autoreporting on Oracle Linux [Orabug: 32890748]
- Add orabug32082455-Upstream_reference_in_python3-abrt-addon.patch [Orabug: 32082455]
- Add bug29870394-fix-redhat-reference.patch [Orabug: 29870394]
- Drop libreport-rhel and libreport-plugin-rhtsupport requires

[2.10.9-24]
- Revert part of patch for rhbz#2137499
- Resolves: rhbz#2137499

[2.10.9-23]
- Fix vmcore call trace parsing in kernel versions &gt;=4.10
- Resolves: rhbz#1993225

[2.10.9-22]
- Update sos report command line
- Resolves: rhbz#2137499</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-2897.html" type="self" title="ELBA-2023-2897" />
    </references>
    <pkglist>
      
      <collection short="ol8_aarch64_distro_builder">
        <name>ol8_aarch64_distro_builder</name>
        <package name="abrt" version="2.10.9" release="24.0.1.el8" epoch="0" arch="src">
          <filename>abrt-2.10.9-24.0.1.el8.src.rpm</filename>
          <sum type="sha256">48006486887c1e1160c36ab1f5e457bfac5d4b50120befef51915078528006be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>