# changelog

author: David Howells <dhowells@redhat.com> - 2.25.1-1
changelog:
  - Sync with binutils-2.25.1-4.
  - Set --enable-targets if the target is powerpc* not just ppc*.
  - Provide LE ppc and ppc64 emulations [BZ 1255947].


author: David Howells <dhowells@redhat.com> - 2.26-5
changelog:
  - Sync with binutils-2.26-10.
  - c6x: Handle inconsistent .cfi_sections directives [binutils bz 19614].


author: Philip Copeland <philip.copeland@oracle.com> - 2.27-9.0.1
changelog:
  - fixup the arm assembly fragment bug described here
    https://sourceware.org/bugzilla/show_bug.cgi?id=20364
    This will, later on, allow us to build the trusted arm firmware without issue


author: David Faust <david.faust@oracle.com> - 2.30-2
changelog:
  - Fix missing BPF JMP32 instruction class.
  - Backport from upstream commit c54a9b56696e584c2b8c7146caac337c063f5516.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-3
changelog:
  - Fix BPF relocations, update CGEN support, add simulator support.
  - Backport of the following Oracle-contributed upstream commits:
    - 78c1c35437a013c63acbff6926ff8d254e283d69
    - 12adf8053ba0b241d3973b46109842a1cbfa60de
    - b3db6d07be467fe86f5b4185a8fc7bec49380c1f
    - e9bffec9afc45cf7c49308f0b4b8cc6bf68f58f2
    - d8740be15930b820ab51d7a76695194022a83551
    - 7d8b91fda9fed423b91d4d43b19dd068457fe555
    - f1919c56e1ffce63c5dbd60c9b29c492be9d0787
    - d73be6116811aeaedd1863c2597ede78be3cf4e5
    - 3ee9565c95f49b6f9e80641f6fda51adffc3af1e
    - d844f10ac2735da8e5643236d7007a81098cbc2b
    - aebda2fbcb92b7538ca240effae598338b5d9625
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-4
changelog:
  - Backport of the following BPF related upstream patches:
    4449c81a85eef44b10532032207e8db5858c00ee bpf: add xBPF ISA
    31b3f3e6e42083e411c47e789eb617070d5ba0e4 opcodes: Add missing entries to ebpf_isa_attr
    3ad6c19423eedf84dfd5ea83bc03933dff8a4579 bpf: simulator: correct div, mod insn semantics
  - Reviewed-by: David Faust <david.faust@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-5
changelog:
  - Fix neg/neg32 BPF instructions.
  - Backport from upstream commit bd434cc4d94ec3d2f9fc1e7c00c27b074f962bc1.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-1
changelog:
  - Upgrade to binutils-2.38.
  - Backport all upstream BPF fixes since binutils-2.38 release:
      0c45feb159a bpf: there is no ldinddw nor ldabsdw instructions
      ba7c1e37cfb bpf: fix relocation addend incorrect symbol value
      ad4e57ab110 bpf: Added linker support for R_BPF_64_NODYLD32.
      dd2947e76aa gas: support double-slash line comments in BPF assembly
      4c5f2370fd1 gas: change meaning of ; in the BPF assembler
      97b29a61f7f bpf: Fixed register parsing disambiguating with possible symbol.
      8fbb497b720 gas: bpf: do not allow referring to register names as symbols in operands
      e5d6f72eb3d bpf: avoid creating wrong symbols while parsing
      d3beaa140dd gas: bpf: new test for MOV with C-like numbers ll suffix
      e3e1e1231d7 gas: tc-bpf.c: fix formatting of comment
      8b476884c3c opcodes: bpf-dis.c: fix typo in comment
      41aa80c5440 bpf: correct neg and neg32 instruction encoding
      5be1b787276 bpf: gas: consolidate handling of immediate overflows
      6bf6f9245ac bpf: use w regs in 32-bit non-fetch atomic pseudo-c
      5b512234c87 bpf: opcodes: fix regression in BPF disassembler
      1e18ffc9915 bpf: include, bfd, opcodes: add EF_BPF_CPUVER ELF header flags
      03460429385 bpf: gas: add field overflow checking to the BPF assembler
      648bd020a28 bpf: remove spurious comment from tc-bpf.c
      249d4715e41 bpf: gas: support relaxation of V4 jump instructions
      9d1e07bd19f bpf: accept # as an inline comment char
      ac284430be5 bpf: gas: add negi and neg32i tests
      04896832b2e bpf: fix register NEG[32] instructions
      fafcbd14a7e bpf: format not a string literal
      02f68ef297b bpf: Add atomic compare-and-exchange instructions
      055a4c8e0f1 bpf: Update atomic instruction pseudo-C syntax
      5cbe549257b bpf: gas,include,opcode: add suppor for instructions BSWAP{16,32,64}
      a50ead7822b bpf: gas: fix in manual that MOVS* pseudoc syntax uses = instead of s=
      3ccfc0b46ca bpf: gas,opcodes: fix pseudoc syntax for MOVS* and LDXS* insns
      c2ca88d74ba bpf: add support for jal/gotol jump instruction with 32-bit target
      e8fc65713d6 bpf: disasemble offsets of value 0 as "+0"
      c24fd9547fb bpf: opcodes, gas: support for signed load V4 instructions
      2f3dbc5fb5e bpf: opcodes, gas: support for signed register move V4 instructions
      d218e7fedc7 DesCGENization of the BPF binutils port
      c9819077700 gas: fix building tc-bpf.c on s390x
      2b8c7766ea3 gas: bpf: fix tests for pseudo-c syntax
      dcdec68b0b5 gas: documentation for the BPF pseudo-c asm syntax
      bba4624d035 gas: BPF pseudo-c syntax tests
      ff5a51b3772 gas: support for the BPF pseudo-c assembly syntax
      5f784ec9277 Changed ld and gas BPF tests
      551fde0ae16 Reloc howto access broken for BPF
      5e4c7a839d1 BPF relocations review / refactoring
      7f6ebecd56e bpf: fix error conversion from long unsigned int to unsigned int [-Werror=overflow]
      0dfdb5234a2 opcodes cgen: remove use of PTR
      60a3da00bd5 objdump/opcodes: add syntax highlighting to disassembler output
  - Orabug 36268634
  - Reviewed-by: Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 8.3.1-2
changelog:
  - Support for the -mxbpf command line option.
  - Do not save/restore callee-saved registers in function
    prologues/epilogues unless generating xBPF.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 8.3.1-3
changelog:
  - Avoid generation of funcalls for one_cmpl{si,di}2 insns in BPF.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 8.3.1-4
changelog:
  - Backports of upstream patches:
    + c9d44022359 bpf: use elfos.h
    + e87c540fe43 bpf: remove trailing whitespaces from source files
    + af30b83b509 bpf: more flexible support for kernel helpers
  - Reviewed-by: Qing Zhao  <qing.zhao@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 8.3.1-5
changelog:
  - Backport of upstream patch:
    5bcc0fa05ef713594f6c6d55d5c837e13a9c9803 - Use expected insn for BPF NOP.
  - Reviewed-by: David Faust <david.faust@oracle.com>


author: David Faust <david.faust@oracle.com> - 12.1.1-1
changelog:
  - Upgrade to GCC 12.1.1.
  - Backport the following supporting commits from upstream:
      2c05a2d1a8e c: use CONST_DECL for enumerators in TYPE_VALUES
      f25efe50374 docs: Add @defbuiltin family of helpers
  - Backport upstream BPF and BTF fixes since 12.1.1:
      f995f567730 bpf: fix zero_extendqidi2 ldx template
      1959aeee1e0 bpf: emit empty epilogues in naked functions
      f64448f4ff1 bpf: add constant pointer to helper-skb-ancestor-cgroup-id.c test
      bc77c035c45 Add -gno-strict-dwarf to dg-options in various btf enum tests
      dfc88fb51c1 bpf: Correct BTF for kernel_helper attributed decls
      4a5bb8bc1c5 btf: print string offset in comment
      1502d724df8 btf: change encoding of forward-declared enums [PR111735]
      b8cf266f4ca btf: avoid wrong DATASEC entries for extern vars [PR112849]
      b6abc5dbfa5 BTF: fix PR debug/112656
      9b6e2cb7e61 BTF: fix PR debug/112768
      b506834e7fa bpf: quote section names whenever necessary in assembly output
      72e212c0290 bpf: change ASM_COMMENT_START to '#'
      86903dd94e6 testsuite: move gcc.c-torture/compile/libcall-2.c to gcc.target/i386/libcall-1.c
      4ed0740c6e8 testsuite: fix gcc.c-torture/compile/libcall-2.c in -m32
      880ae958fad varasm.cc: refer to assemble_external_libcall only ifdef ASM_OUTPUT_EXTERNAL
      f31a019d116 Emit funcall external declarations only if actually used.
      099b15e2bdb Fixed problem with BTF defining smaller enums.
      19cc5857e2c bpf: Forces __buildin_memcmp not to generate a call upto 1024 bytes.
      a789af1ca27 bpf: Corrected condition in core_mark_as_access_index.
      61e060c4dce bpf: Delayed the removal of the parser enum plugin handler.
      b6db325ac3e bpf: remove bpf-helpers.h
      8329ba35974 bpf: fix pseudo-c asm emitted for *mulsidi3_zeroextend
      9815ef77313 bpf: testsuite: fix expected regexp in gcc.target/bpf/ldxdw.c
      327d38f1018 bpf: Improvements in CO-RE builtins implementation.
      721f7e2c4e5 Fix tests for PR 106537.
      e2c42860b6b bpf: neg instruction does not accept an immediate
      35b5762a740 bpf: bump maximum frame size limit to 32767 bytes
      e1f45bea274 Add warning options -W[no-]compare-distinct-pointer-types
      b7c50f68f26 bpf: support `naked' function attributes in BPF targets
      5da4c0b85a9 bpf: remove useless define_insn for extendsisi2
      489e1adf779 bpf: fix pseudoc w regs for small modes [PR111029]
      f93a612fc45 bpf: liberate R9 for general register allocation
      6103df1e4fa bpf: allow exceeding max num of args in BPF when always_inline
      e7cae4f873f bpf: Fixed GC mistakes in BPF builtins code.
      c2a447d8404 bpf: CO-RE builtins support tests.
      e0a81559c19 bpf: Implementation of BPF CO-RE builtins
      9f5372707f9 bpf: disable tail call optimization in BPF targets
      14dab1a1bcc bpf: ISA V4 sign-extending move and load insns [PR110782,PR110784]
      9cbf4286a9d bpf: minor doc cleanup for command-line options
      31d18ff4424 bpf: correct pseudo-C template for add3 and sub3
      db189d02ef1 bpf: add v3 atomic instructions
      590a8287bf2 bpf: fix generation of neg and neg32 BPF instructions
      8d36a0f5952 bpf: don't print () in bpf_print_operand_address
      be16bb885ef bpf: add pseudo-c asm dialect for "nop"
      4be3919fb75 bpf: sdiv/smod are now part of BPF V4
      da445a58582 bpf: remove -mkernel option and BPF_KERNEL_VERSION_CODE
      f1e34551e4d bpf: make use of the bswap{16,32,64} V4 BPF instruction
      77d0f9ec380 bpf: pseudo-c assembly dialect support
      13ed106723c bpf: fixed template for neg (added second operand)
      53d12ecd624 bpf: enable instruction scheduling
      934da923a72 btf: fix bootstrap -Wformat errors [PR110073]
      f2e60a00c7c btf: Fix -Wformat errors
      7aae58b04b9 btf: improve -dA comments for testsuite
      00887865398 btf: be clear when record size/type is not used
      c348a717213 bpf: fix memory constraint of ldx/stx instructions [PR108790]
      70b303049e4 btf: correct generation for extern funcs [PR106773]
      4f7aa145b79 btf: fix 'extern const void' variables [PR106773]
      2bce22e88e1 btf: add 'extern' linkage for variables [PR106773]
      8422861bddc btf: Add support to BTF_KIND_ENUM64 type
      5df04a7aa83 btf: do not use the CHAR `encoding' bit for BTF
      32566720f3a btf: emit linkage information in BTF_KIND_FUNC entries
      3b81f5c4d8e bpf: disable -fstack-protector in BPF
      c7279270a2d bpf: correct bpf_print_operand for floats [PR108293]
      5ddfe794405 bpf: add define_insn for bswap
      6052482f841 bpf: avoid possible use of uninitialized variable
      564b1118465 bpf: Use enum for resolved overloaded builtins
      93ab7d03dfb bpf: cleanup missed refactor
      068baae1864 bpf: add preserve_field_info builtin
      2a2fb3e30c2 bpf: remove unused variables from bpf_expand_{prologue,epilogue}
      b504149d2c9 bpf: handle anonymous members in CO-RE reloc [PR106745]
      c68b5c078bb bpf: define __bpf__ as well as __BPF__ as a target macro
      6d1f144b3e6 bpf: facilitate constant propagation of function addresses
  - Orabug 36268701
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-5
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804186


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
  - Resolves: #1806936


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
  - Resolves: #1803583


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - fix "CVE-2020-1702 buildah: containers/image: Container images read entire image manifest into memory"
  - Resolves: #1810612


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1817738


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-12
changelog:
  - fix "CVE-2020-14040 buildah: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-7]"
  - Resolves: #1854714


author: Nikita Gerasimov <nikita.gerasimov@oracle.com> - 1.11.6-12.0.1
changelog:
  - disable inode index and redirect_dir by default for overlayfs [Orabug: 31025483]
  - Fixes troubles with oracle registry login [Orabug: 29937283]


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.76-1
changelog:
  - Allow containers to use fuse file systems by default
  - Allow containers to sendto dgram socket of container runtimes
  - Needed to run container runtimes in notify socket unit files.


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.10-1
changelog:
  - Update to the latest container-selinux patch from upstream
  - Label files under /usr/libexec/lxc as container_runtime_exec_t
  - Give container_t access to XFRM sockets
  - Allow spc_t to dbus chat with init system
  - Allow containers to read cgroup configuration mounted into a container


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.19-1
changelog:
  - Fix mcs transition problem on stdin/stdout/stderr
  - Add labels for CRI-O
  - Allow containers to use tunnel sockets


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.73-2
changelog:
  - moved changelog entries:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.
  - Allow container_runtimes to setattr on callers fifo_files
  - Fix restorecon to not error on missing directory


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.7.4-1
changelog:
  - Resolves: #1664009 - bump to v0.7.4
  - remove unused devel and unit-test* packages
  - update go build env


author: Jindrich Novy <jnovy@redhat.com> - 0.8.3-3
changelog:
  - fix "CVE-2020-10749 containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters"
  - Resolves: #1842334


author: Dmitry Alexeev <dmitry.alexeev@oracle.com> - 1:0.1.37-3.0.1
changelog:
  - add oracle registry into the conf file [Orabug: 29845934, 30302344]
  - delivering fix for [Orabug: 29874238] by Nikita Gerasimov <nikita.gerasimov@oracle.com>


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-4
changelog:
  - temporary disable s390x arch due to #1773504 causing fuse-overlayfs
    failing to build - skopeo/contaners-common requires it


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-7
changelog:
  - fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
  - Resolves: #1806944


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-10
changelog:
  - fix "CVE-2020-1702 skopeo: containers/image: Container images read entire image manifest into memory"
  - Resolves: #1810613


author: EL Errata <el-errata_ww@oracle.com> - 1:0.1.40-11.0.1
changelog:
  - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483]
  - Add oracle registry into the conf file [Orabug: 29845934]
  - Fix oracle registry login issues [Orabug: 29937192]
  - Removed upstream references [Orabug: 31175132]


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-12
changelog:
  - fix "CVE-2020-14040 skopeo: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-7]"
  - Resolves: #1854716


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 1:0.1.40-12.0.1
changelog:
  - disable inode index and redirect_dir by default for overlayfs [Orabug: 31025483]
  - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483]
  - Add oracle registry into the conf file [Orabug: 29845934]
  - Fix oracle registry login issues [Orabug: 29937192]
  - Removed upstream references [Orabug: 31175132]


author: David Howells <dhowells@redhat.com> - 4.7.2-2.aa.20121114svn.2
changelog:
  - Use CONFIG_FLAGS and ditch COPT to avoid confusion.
  - Backport cleanups from the RHEL-6.4 cross-compiler.
  - Backport some macroisation from the RHEL-6.4 cross-compiler.
  - Remove documentation build config as it we do not use it for gcc.
  - The hppa64 target cannot actually build hppa, so provide hppa [BZ 892220].
  - Provide ppc- and ppc64- rpms with symlinks to powerpc- and powerpc64- rpms.


author: David Howells <dhowells@redhat.com> - 4.8.2-1
changelog:
  - Rebase on gcc-4.8.2-15
  - Enable sysroot [BZ 1011415].
  - Enable C++ compiler without libstdc++ [BZ 1078108].


author: Durai Govindasamy <durai.vattakalvalasu.govindas@oracle.com> - 19.03.11-10
changelog:
  - Addresses runc CVE-2021-30465 - updated runc versions in cli/vendor.conf and docker-engine/vendor.conf to 1.0.0-rc95.


author: Durai Govindasamy <durai.vattakalvalasu.govindas@oracle.com> - 19.03.11-12
changelog:
  - Addressed oraBug 33099096 docker: Error response from daemon: unable to find user 0: invalid argument.


author: <jesse.butler@oracle.com> 17.03.1-ce-3.0.1
changelog:
  - Update docker-engine package for upstream 17.03.1
  - Enable configuration of Docker daemon via sysconfig [orabug 21804877]
  - Require UEK4 for docker 1.9 [orabug 22235639 22235645]
  - Add docker.conf for prelink [orabug 25147708]
  - Update oracle linux selinux policy to match upstream [orabug 25653794]
  - Use dockerd instead of docker daemon as it is deprecated [orabug 25653794]


author: <jesse.butler@oracle.com> 17.06.2.ol-1.0.1
changelog:
  - Update docker-engine package for upstream 17.06.2 [orabug 26673768]
  - Migrate to new "ol"-based versioning
  - add docker-storage-config utility


author: Jindrich Novy <jnovy@redhat.com> - 0.4.1-3
changelog:
  - temporarily remove s390x arch from supported arches due to
    missing renameat2 syscall
  - Related: #1721151


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-5
changelog:
  - upstream patch when applied to the 0.7.2 source code is applied to the wrong function,
    new patch fixes it
  - Resolves: #1805013


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-6
changelog:
  - fix "Pushing container image built with rootless podman fails with: "file integrity checksum failed""
  - Resolves: #1810498


author: Dave Dykstra <dwd@fedoraproject.org> - 3.4.2-4
changelog:
  - Bump release number in order to larger than a rebuild of fuse package
    done before separation pull request was merged.


author: Diego Martinez de Dios <diego.m.martinez@oracle.com> - 0.5.0-4
changelog:
  - Refactor of files inclusion arrangement to avoid listing twice doc files
  - Remove inclusion of debug info
  - Swap of global macro for _libdir directly


author: Guido Tijskens <guido.tijskens@oracle.com> -- 0.12.7-2
changelog:
  - LINUX-11994 oci-utils for OL9
  - adjust oci-kvm guest test
  - show-all option for oci-iscsi-config
  - LINUX-12111 oci-public-ip (oci-utils) does not show the reason why no public ip's are returned.
  - LINUX-12119 oci-public-ip does not have the correct ordering in "primary on top"
  - update oci-kvm


author: Guido Tijskens <guido.tijskens@oracle.com> -- 0.12.7-3
changelog:
  - spec file fixed for ol9 builds of oci-kvm and oci-migrate
  - tests for instance distribution and version


author: Guido Tijskens <guido.tijskens@oracle.com> -- 0.12.9-1
changelog:
  - renamed dashed python files to underscore python files
  - extended instance principal test code with listing attached volunes, all volumes, attached volumes, available notification topics, vcns, subnets, vnics.


author: Guido Tijskens <guido.tijskens@oracle.com> -- 0.14.0-0
changelog:
  - support for ipv6:
  - LINUX-9259 add ipv6 support in oci-metadata
  - OLDIS-6914 IPv6 support for oci-utils


author: Oussama Jamal <oussama.jamal@oracle.com> - 0.14.0-5.el7
changelog:
  - Update iommu_check function The current version contains a bug that causes it
    to stop working after using a VM for a while. (Oussama Jamal)  [Orabug:
    36380825]


author: Colin Walters <walters@redhat.com> - 2018.1-2
changelog:
  - New upstream version for 7.5.0
  - https://github.com/ostreedev/ostree/releases/tag/v2018.1
  - https://github.com/ostreedev/ostree/releases/tag/v2017.15


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-12
changelog:
  - fix "Podman can't reuse a container name, even if the container that was using it is no longer around"
  - Resolves: #1807437


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-13
changelog:
  - fix "[FJ8.2 Bug]: [REG]The "--group-add" option of "podman create" doesn't function."
  - Resolves: #1808702


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-14
changelog:
  - fix "CVE-2020-1702 podman: containers/image: Container images read entire image manifest into memory"
  - Resolves: #1810614


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-15
changelog:
  - update fix for "podman (1.6.4) rhel 8.1 no route to host from inside container"
  - Resolves: #1806895


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-17
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1817743


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-18
changelog:
  - fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
  - Resolves: #1806940


author: Edward Leung <edward.leung@oracle.com> - 1.6.4-18.0.1
changelog:
  - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483]
  - handle redirect from the docker registry v2 [Orabug: 29874238] (nikita.gerasimov@oracle.com)


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-19
changelog:
  - fix "podman segfault upon doing buildah operations due to error handling message"
  - Resolves: #1853326


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-21
changelog:
  - fix "podman launches a container with systemd instance inside - bind mounts of systemd cgroup entries are being leaked in host mount namespace"
  - Resolves: #1860506


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-22
changelog:
  - revert regressions introduced by 0001-bump-github.com-containers-buildah-to-v1.11.5.patch
    regressed bugzilla list follows:
  - Related: #1817743, #1792243, #1784950


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-23
changelog:
  - fix "CVE-2020-14040 podman: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-7]"
  - Resolves: #1854715


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-25
changelog:
  - use proper patch to address "podman does not use $TMPDIR loading a tar file."
  - Resolves: #1877699


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-26
changelog:
  - fix "CVE-2020-14370 podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API [rhel-7]"
  - Resolves: #1881062


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-28
changelog:
  - fix "CVE-2021-20188 podman: container users permissions are not respected in privileged containers [rhel-7.9.z]"
  - Resolves: #1918282


author: EL Errata <el-errata_ww@oracle.com> - 1.6.4-29.0.1
changelog:
  - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483]
  - handle redirect from the docker registry v2 [Orabug: 29874238] (nikita.gerasimov@oracle.com)
  - remove changes in NaiveDiffDriver


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-30
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/c19e460)
  - Related: #2074089


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-32
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/aba15dd)


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-33
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/68af661)


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-35
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/e330751)


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-36
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/7667df8)


author: Ralph Bean <rbean@redhat.com> - 0.6.0-1
changelog:
  - new version
  - Include license file, now shipped by upstream
  - Run tests the way upstream does in their Makefile.


author: williamjmorenor@gmail.com - 2016.9.26-6
changelog:
  - Fix path of .pem file
    Thanks to @carlwgeorge
    See: https://src.fedoraproject.org/rpms/python-certifi/pull-request/1


author: <jdennis@redhat.com> - 2018.10.15-3
changelog:
  - Resolves: rhbz#1659132 Incorrect location used for system certs
    where() now returns /etc/pki/tls/certs/ca-bundle.crt


author: José Matos <jamatos@fedoraproject.org> - 3.5.0b2-0.2
changelog:
  - Improve description to make it clear that this package in only needed for python 2.7
  - Make the license tag information more explicit.


author: Avram Lubkin <aviso@fedoraproject.org> - 3.5.0b2-1
changelog:
  - Updated to build for el6
  - Updated to build Python3 packages
  - Changed Python2 package name to python2-configparser for Fedora 24+
  - Updated description
  - Removed license comments


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.1.2-5
changelog:
  - Python 2 binary package renamed to python2-daemon
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tianyue Lan <tianyue.lan@oracle.com> - 2.1.2-7.0.3
changelog:
  - requires python36-docutils and python36-mock
  - build for python 3 on ol7
  - Revert to python requirement for python 2.


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:2.6.1-2
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:2.7.0-1
changelog:
  - Fix license tag (should be BSD)
  - Update to latest version (#1469314)
    See https://github.com/dateutil/dateutil/blob/master/NEWS for details.


author: Qing Lin <qing.lin@oracle.com> 2.28.0-1.0.1
changelog:
  - Add missing requirements(enum34, ipaddress) for python2 cryptography
  - Suppress the warning for openssl-1.0.2, supported for the lifetime of OL7 [Orabug: 32365930]


author: Qing Lin <qing.lin@oracle.com> 2.40.1-1
changelog:
  - Update to version 2.40.1
  - Change cryptography version to a range
  - Use standalone cryptography instead of embedding in the package


author: Qing Lin <qing.lin@oracle.com> 1.0.1-1
changelog:
  - Update to v1.0.1
  - Remove python2 and Update based on Christopher's comments [jirabug: OLDIS-18075]


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 3.0.29-1.0.1
changelog:
  - Update spec file macros to build for el7 - Convert back to py3_ macros
  - Disabled tests due to missing pytest dependency


author: Fabian Affolter <mail@fabian-affolter.ch> - 0.3.6-2
changelog:
  - Use var for source URL
  - Split BRs
  - Delete hidden files from doc generation
  - Better use of wildcards (rhbz#1787140)


author: Mark Kanda <mark.kanda@oracle.com> - 12:2.11.1-2.el7
changelog:
  - hw/acpi-build: build SRAT memory affinity structures for DIMM devices (Haozhong Zhang)  [Orabug: 27509753] 
  - qmp: distinguish PC-DIMM and NVDIMM in MemoryDeviceInfoList (Haozhong Zhang)  [Orabug: 27509753] 
  - pc-dimm: make qmp_pc_dimm_device_list() sort devices by address (Haozhong Zhang)  [Orabug: 27509753] 
  - nvdimm: add a macro for property "label-size" (Haozhong Zhang)  [Orabug: 27509753] 
  - nvdimm: add 'unarmed' option (Haozhong Zhang)  [Orabug: 27509753] 
  - block: Fix NULL dereference on empty drive error (Kevin Wolf)  [Orabug: 27832106] 
  - Revert "IDE: Do not flush empty CDROM drives" (Stefan Hajnoczi)  [Orabug: 27832106] 
  - block: test blk_aio_flush() with blk->root == NULL (Kevin Wolf)  [Orabug: 27832106] 
  - block: add BlockBackend->in_flight counter (Stefan Hajnoczi)  [Orabug: 27832106] 
  - block: extract AIO_WAIT_WHILE() from BlockDriverState (Stefan Hajnoczi)  [Orabug: 27832106] 
  - aio: rename aio_context_in_iothread() to in_aio_context_home_thread() (Stefan Hajnoczi)  [Orabug: 27832106] 
  - qemu.spec: Add dependency for libiscsi 1.9.0-8 (Mark Kanda)  [Orabug: 27832300] 
  - multiboot.c: Document as fixed against CVE-2018-7550 (Jack Schwartz)  [Orabug: 27832332]  {CVE-2018-7550}
  - CVE-2017-18030: cirrus_invalidate_region() lets priv guest user cause DoS (Mark Kanda)  [Orabug: 27832319]  {CVE-2017-18030}
  - vga: fix region calculation (Gerd Hoffmann)  [Orabug: 27832309]  {CVE-2018-7858}
  - keymap: use glib hash for kbd_layout_t (Gerd Hoffmann)  [Orabug: 27663795] 
  - qemu.spec: Enable coroutine pool and vhost-vsock (Karl Heubaum)  [Orabug: 27832337]


author: Mark Kanda <mark.kanda@oracle.com> - 15:2.11.1-5.el7
changelog:
  - slirp: correct size computation while concatenating mbuf (Prasad J Pandit)  [Orabug: 28279250]  {CVE-2018-11806}
  - hostmem-file: add "align" option (Haozhong Zhang)  [Orabug: 28166355] 
  - sev/i386: fix memory leak in sev_guest_init() (Greg Kurz)  
  - hmp: free sev info (Marc-André Lureau)  
  - sev/i386: add sev_get_capabilities() (Brijesh Singh)  
  - sev/i386: qmp: add query-sev-capabilities command (Brijesh Singh)  
  - sev/i386: qmp: add query-sev-launch-measure command (Brijesh Singh)  
  - sev/i386: hmp: add 'info sev' command (Brijesh Singh)  
  - cpu/i386: populate CPUID 0x8000_001F when SEV is active (Brijesh Singh)  
  - sev/i386: add migration blocker (Brijesh Singh)  
  - sev/i386: finalize the SEV guest launch flow (Brijesh Singh)  
  - sev/i386: add support to LAUNCH_MEASURE command (Brijesh Singh)  
  - target/i386: encrypt bios rom (Brijesh Singh)  
  - sev/i386: add command to encrypt guest memory region (Brijesh Singh)  
  - sev/i386: add command to create launch memory encryption context (Brijesh Singh)  
  - sev/i386: register the guest memory range which may contain encrypted data (Brijesh Singh)  
  - sev/i386: add command to initialize the memory encryption context (Mark Kanda)  
  - include: add psp-sev.h header file (Brijesh Singh)  
  - sev/i386: qmp: add query-sev command (Brijesh Singh)  
  - target/i386: add Secure Encrypted Virtualization (SEV) object (Brijesh Singh)  
  - kvm: introduce memory encryption APIs (Brijesh Singh)  
  - kvm: add memory encryption context (Brijesh Singh)  
  - docs: add AMD Secure Encrypted Virtualization (SEV) (Brijesh Singh)  
  - machine: add memory-encryption option (Brijesh Singh)  
  - update Linux headers to 4.16-rc5 (Paolo Bonzini)  
  - i386: Define the Virt SSBD MSR and handling of it (CVE-2018-3639) (Konrad Rzeszutek Wilk)  [Orabug: 28165452]  {CVE-2018-3639}
  - i386: define the AMD 'virt-ssbd' CPUID feature bit (CVE-2018-3639) (Konrad Rzeszutek Wilk)  [Orabug: 28165452]  {CVE-2018-3639}
  - i386: define the 'ssbd' CPUID feature bit (CVE-2018-3639) (Daniel P. Berrangé)  [Orabug: 28165452]  {CVE-2018-3639}


author: Qing Lin <qing.lin@oracle.com> - 3.0.0-2.0.2.el7
changelog:
  - build from source file. (Qing Lin)  
  - install it in normal gem place. (Qing Lin)  
  - build scl version (Qing Lin)


author: Qing Lin <qing.lin@oracle.com> - 2.1.0-2.el7
changelog:
  - build on ruby-2.5.5 (Qing Lin)  
  - updated the installation path (Qing Lin)  
  - corrected the spec file. (Qing Lin)


author: Qing Lin <qing.lin@oracle.com> - 2.1.0-2.0.2.el7
changelog:
  - fixed the build issue 2/2 (Qing Lin)  
  - fixed the issue with build. (Qing Lin)  
  - use scl build but install to common place. (Qing Lin)  
  - build for rh-ruby25 (Qing Lin)


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:1.0.0-16.rc4.gite6516b3
changelog:
  - install bash completion to correct location
  - remove shebang from bash completion gh#1679
  - correct rpmlint issues


author: Michael Calunod <michael.calunod@oracle.com> - 1.0.0-19.rc5.git4bb1fe4.0.4.el7
changelog:
  - fixing version (Michael Calunod)  
  - adding nokem to buildargs in spec file. (Michael Calunod)  
  - cgroups: nokmem: error out on explicitly-set kmemcg limits (Aleksa Sarai)  
  - libcontainer: ability to compile without kmem (Kir Kolyshkin)


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-9
changelog:
  - Resolves: #1738583 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption
  - Resolves: #1828369 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828370 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1
changelog:
  - new version 4.11
  - libsystemd integration
  - Resolves: #1829467 - squid:4 rebase
  - Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in
    addStackElement allows for a heap buffer overflow and a crash
  - Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation
    in request allows for proxy manipulation
  - Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction
    in url_regex may lead to security bypass
  - Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host
    parameter to cachemgr.cgi which could result in squid behaving in unsecure way
  - Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation
    issues in HTTP Request processing
  - Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid
    acting as reverse-proxy
  - Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure
    issue in FTP Gateway
  - Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting
    issue in HTTP message processing
  - Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure
    issue in HTTP Digest Authentication
  - Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery
    issue in HTTP Request processing
  - Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation
    in URI processor
  - Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI
    processor
  - Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN
    processing
  - Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization
    header causes DoS


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2
changelog:
  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3
changelog:
  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure


