# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-3
changelog:
  - Bump version to 1.4.2.4-3
  - Issue 50712 - Version comparison doesn't work correctly on git builds (relates to #1748994)


author: Mark Reynolkds <mreynolds@redhat.com> - 1.4.2.4-5
changelog:
  - Bump version to 1.4.2.4-5
  - Resolves: Bug 1676699 - dsconf allows to set an empty password for Directory Manager
  - Resolves: Bug 1714688 - dscontainer executable should be placed under /usr/libexec/dirsrv/
  - Resolves: Bug 1773115 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1790979 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1790981 - Entry cache contention during base search
  - Resolves: Bug 1790984 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-6
changelog:
  - Resolves: Bug 1776227 - Error: 'PwPolicyManager' object has no attribute 'get_attr_list'
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10(fix regression)
  - Resolves: Bug 1758473 - AddressSanitizer: heap-use-after-free in log_get_loglist
  - Resolves: Bug 1790259 - Change the default behavior of 'nsslapd-verify-filter-schema'
  - Resolves: Bug 1773114 - ns-slapd hangs during CleanAllRUV tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-7
changelog:
  - Bump version to 1.4.2.4-7
  - Resolves: Bug 1744662 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1779216 - dsctl doesn't work with 'slapd-' in the instance name
  - Resolves: Bug 1790984 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
  - Resolves: Bug 1793060 - dsctl healthcheck issues error : type object 'datetime.date' has no attribute 'fromisoformat'
  - Resolves: Bug 1758494 - LeakSanitizer: detected memory leaks in do_add 
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-8
changelog:
  - Bump version to 1.4.2.4-8
  - Resolves: Bug 1807971 - dsctl healthcheck fails at checking replica when conflict entries are present


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.1-1
changelog:
  - Bump version to 1.4.4.1
  - Issue 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  - Issue 50877 - task to run tests of csn generator
  - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  - Issue 48055 - CI test - automember_plugin(part3)
  - Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1
  - Issue 51031 - UI - transition between two instances needs improvement


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.2-1
changelog:
  - Bump version to 1.4.4.2
  - Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  - Issue 51054 - Revise ACI target syntax checking
  - Issue 51068 - deadlock when updating the schema
  - Issue 51042 - try to use both c_rehash and openssl rehash
  - Issue 51042 - switch from c_rehash to openssl rehash
  - Issue 50992 - Bump jemalloc version and enable profiling
  - Issue 51060 - unable to set sslVersionMin to TLS1.0
  - Issue 51064 - Unable to install server where IPv6 is disabled
  - Issue 51051 - CLI fix consistency issues with confirmations
  - Issue 50655 - etime displayed has an order of magnitude 10 times smaller than it should be
  - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  - Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  - Issue 49761 - Fix CI tests
  - Issue 51047 - React deprecating ComponentWillMount
  - Issue 50499 - fix npm audit issues
  - Issue 50545 - Port dbgen.pl to dsctl
  - Issue 51027 - Test passwordHistory is not rewritten on a fail attempt


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.3-1
changelog:
  - Bump version to 1.4.4.3
  - Issue 50931 - RFE AD filter rewriter for ObjectCategory
  - Issue 50860 - Port Password Policy test cases from TET to python3 part1
  - Issue 51113 - Allow using uid for replication manager entry
  - Issue 51095 - abort operation if CSN can not be generated
  - Issue 51110 - Fix ASAN ODR warnings
  - Issue 49850 - ldbm_get_nonleaf_ids() painfully slow for databases with many non-leaf entries
  - Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  - Issue 51076 - remove unnecessary slapi entry dups
  - Issue 51086 - Improve dscreate instance name validation
  - Issue:51070 - Port Import TET module to python3 part1
  - Issue 51037 - compiler warning
  - Issue 50989 - ignore pid when it is ourself in protect_db
  - Issue 51037 - RFE AD filter rewriter for ObjectSID
  - Issue 50499 - Fix some npm audit issues
  - Issue 51091 - healthcheck json report fails when mapping tree is deleted
  - Issue 51079 - container pid start and stop issues
  - Issue 49761 - Fix CI tests
  - Issue 50610 - Fix return code when it's nothing to free
  - Issue 50610 - memory leaks in dbscan and changelog encryption
  - Issue 51076 - prevent unnecessarily duplication of the target entry
  - Issue 50940 - Permissions of some shipped directories may change over time
  - Issue 50873 - Fix issues with healthcheck tool
  - Issue 51082 - abort when a empty valueset is freed
  - Issue 50201 - nsIndexIDListScanLimit accepts any value


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.4-1
changelog:
  - Bump version to 1.4.4.4
  - Issue 51175 - resolve plugin name leaking
  - Issue 51187 - UI - stop importing Cockpit's PF css
  - Issue 51192 - Add option to reject internal unindexed searches
  - Issue 50840 - Fix test docstrings metadata-1
  - Issue 50840 - Fix test docstrings metadata
  - Issue 50980 - fix foo_filter_rewrite
  - Issue 51165 - add more logconv stats for the new access log keywords
  - Issue 50928 - Unable to create a suffix with countryName either via dscreate or the admin console
  - Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  - Issue 50545 - Port remaining legacy tools to new python CLI
  - Issue 51165 - add new access log keywords for wtime and optime
  - Issue 49761 - Fix CI test suite issues ( Port remaning acceptance test suit part 1)
  - Issue 51070 - Port Import TET module to python3 part2
  - Issue 51142 - Port manage Entry TET suit to python 3 part 1
  - Issue 50860 - Port Password Policy test cases from TET to python3 final
  - Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  - Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  - Issue 49256 - log warning when thread number is very different from autotuned value
  - Issue 51157 - Reindex task may create abandoned index file
  - Issue 50873 - Fix issues with healthcheck tool
  - Issue 50860 - Port Password Policy test cases from TET to python3 part2
  - Issue 51166 - Log an error when a search is fully unindexed
  - Issue 50544 - OpenLDAP syncrepl compatability
  - Issue 51161 - fix SLE15.2 install issps
  - Issue 49999 - rpm.mk build-cockpit should clean cockpit_dist first
  - Issue 51144 - dsctl fails with instance names that contain slapd-
  - Issue 51155 - Fix OID for sambaConfig objectclass
  - Issue 51159 - dsidm ou delete fails
  - Issue 50984 - Memory leaks in disk monitoring
  - Issue 51131 - improve mutex alloc in conntable
  - Issue 49761 - Fix CI tests
  - Issue 49859 - A distinguished value can be missing in an entry
  - Issue 50791 - Healthcheck should look for notes=A/F in access log
  - Issue 51072 - Set the default minimum worker threads
  - Issue 51140 - missing ifdef
  - Issue 50912 - pwdReset can be modified by a user
  - Issue 50781 - Make building cockpit plugin optional
  - Issue 51100 - Correct numSubordinates value for cn=monitor
  - Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  - Issue 137 - fix compiler warning
  - Issue 50781 - Make building cockpit plugin optional
  - Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  - Issue 51034 - labeledURIObject
  - Issue 50545 - Port remaining legacy tools to new python CLI
  - Issue 50889 - Extract pem files into a private namespace
  - Issue 137 - Implement EntryUUID plugin
  - Issue 51072 - improve autotune defaults
  - Issue 51115 - enable samba3.ldif by default
  - Issue 51118 - UI - improve modal validation when creating an instance
  - Issue 50746 - Add option to healthcheck to list all the lint reports


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.0-1
changelog:
  - Bump version to 1.4.4.0
  - Issue 50933 - 10rfc2307compat.ldif is not ready to be used by default
  - Issue 50931 - RFE AD filter rewriter for ObjectCategory
  - Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  - Issue 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  - Issue 51008 - dbhome in containers
  - Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  - Issue 51014 - slapi_pal.c possible static buffer overflow
  - Issue 50545 - remove dbmon "incr" option from arg parser
  - Issue 50545 - Port dbmon.sh to dsconf
  - Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  - Issue 49731 - Fix additional issues with setting db home directory by default
  - Issue 50337 - Replace exec() with setattr()
  - Issue 50905 - intermittent SSL hang with rhds
  - Issue 50952 - SSCA lacks basicConstraint:CA
  - Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  - Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 4.14-23.p01
changelog:
  - Add missing patch "a2ps-format-security.patch" and new texinfo needs to have documentencoding defined


author: Than Ngo <than@redhat.com> - 19.12.2-2
changelog:
  - Fix #1862466 - CVE-2020-16116, maliciously crafted archive can install files anywhere in the user's home directory


author: liufeng <liufeng@kylinos.cn> - 1.22-1.p01
changelog:
  - fix the runc conflicts with file from package docker-engine
  - fix error require & buildrequire
  - add patch atomic-1.22-kylin-fix-unsafe-deprecated-methods.patch


author: Jindrich Novy <jnovy@redhat.com> - 1:1.22.1-30.gitb507039
changelog:
  - temporary disable s390x arch due to #1773504 causing fuse-overlayfs
    failing to build - skopeo/contaners-common requires it


author: Jindrich Novy <jnovy@redhat.com> - 1:1.22.1-33.gitb507039
changelog:
  - /var/lib/atomic to be a symlink to /var/lib/containers
    provided by skopeo (containers-common subpackage)
  - Resolves: #1817605


author: Marian Csontos <mcsontos@redhat.com> - 2.03.06-1
changelog:
  - IMPORTANT: Prevent creating VGs with PVs with different logical block sizes.
  - Fix metadata writes from corrupting with large physical block size.
  - Correctly set read_ahead for LVs when pvmove is finished.
  - Add support for DM_DEVICE_GET_TARGET_VERSION into device_mapper.
  - Activate thin-pool layered volume as 'read-only' device.
  - Ignore crypto devices with UUID signature CRYPT-SUBDEV.
  - Synchronize with udev when dropping snapshot.
  - Add missing device synchronization point before removing pvmove node.
  - See WHATS_NEW for more.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.07-1
changelog:
  - Ensure minimum required region size on striped RaidLV creation.
  - Fix resize of thin-pool with data and metadata of different segtype.
  - Improve mirror type leg splitting.
  - Fix activation order when removing merged snapshot.
  - Experimental VDO support for lvmdbusd.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.09-1
changelog:
  - Fix showing of a dm kernel error when uncaching a volume with cachevol.
  - Fix memleak in syncing of internal cache.
  - Fix pvck dump_current_text memleak.
  - Fix lvmlockd result code on error path for _query_lock_lv().
  - Update pvck man page and help output.
  - Accept more output lines from vdo_format.
  - Prevent raid reshaping of stacked volumes.
  - Writecache and VDO volume handling improvements.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.10-1
changelog:
  - Add integrity with raid capability.
  - Add writecache and integrity support to lvmdbusd.
  - Zero pool metadata on allocation (disable with allocation/zero_metadata=0).
  - Failure in zeroing or wiping will fail command (bypass with -Zn, -Wn).
  - Add lvcreate of new cache or writecache lv with single command.
  - Generate unique cachevol name when default required from lvcreate.
  - Converting RAID1 volume to one with same number of legs now succeeds with a
    warning.
  - Fix conversion to raid from striped lagging type.
  - Fix conversion to 'mirrored' mirror log with larger regionsize.
  - Fix running out of free buffers for async writing for larger writes.
  - Fix support for lvconvert --repair used by foreign apps (i.e. Docker).
  - Add support for VDO in blkdeactivate script.


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-102
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fixes config.Namespaces is empty when accessed
         write freezer state after every state check
         may kill other process when container has been stopped
         fix cgroup hugetlb size prefix for kB
         check nil pointers in cgroup manager


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-104
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:don't deny all devices when update cgroup resource
         do not permit /proc mounts to non-directories
         fix permission denied


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-200
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:sync bugfix and bump version to 200, bugfix include
         1. add cpu and memory info when print cgroup info
         2. fix freezing race


author: xiadanni<xiadanni1@huawei.com> - 1.0.0.rc3-201
changelog:
  - Type:CVE
  - CVE:CVE-2021-30465
  - SUG:NA
  - DESC:add mount destination validation(fix CVE-2021-30465)


author: gaoyusong<gaoyusong1@huawei.com> - 3.1-1.se.01
changelog:
  - Patch1: libselinux-20200318.patch
  - Patch2: add-selinux_restorecon.patch
  - Patch3: libselinux-20200326.patch
  - Patch4: libselinux-20200427.patch


author: caoshuhao<caoshuhao@kylinos.com> - 3.1-1.se.04
changelog:
  - Add patch: libselinux-fix-ston-wrong.patch
  - Author: Meng Dehui
  - Resume USER_AVC checks

  - Remove patch: libselinux-20200326.patch
  - Author: Jiang Xingsong
  - Fix user_avc wrong: Audit cannot be controlled by policy.


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 2.0.3-1
changelog:
  - Update for new upstream tarball: Pacemaker-2.0.3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.0.3
    (functionally identical to 2.0.3-rc3, new build mostly to fix a memory
    leak & allow for easy glibc ~2.31+ friendly switch away from ftime(3))
  - Fix unability to build with Inkscape 1.0 beta (and possibly beyond)


author: Chris Lumens <clumens@redhat.com> - 2.0.4-1
changelog:
  - Update for new upstream tarball: Pacemaker-2.0.4
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.0.4


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.5-0.5.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.0.5-rc2,
    includes fix for CVE-2020-25654
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.0.5-rc2
  - Remove dependencies to nagios-plugins from metadata-package
  - some sync with structure of upstream spec-file
  - removed some legacy conditionals
  - added with-cibsecrets
  - enable some basic gating-tests
  - remove building documentation using publican from ELN
  - rename doc-dir for ELN


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.5-0.6.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-2.0.5-rc3
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.0.5-rc3
  - Corosync in Fedora now provides corosync-devel as well in isa-flavor


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.5-8
changelog:
  - Update for new upstream release tarball: Pacemaker-2.0.5
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.0.5


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.5-10
changelog:
  - Conflicts of doc package introduced to fix upgrade/downgrade
    issues needs to be independent from arch


author: liutao <liutao1@kylinos.cn> - 2.0.5-10.p01
changelog:
  - Modify spec file:corosync-devel(aarch-64) to corosync-devel 
  	remove (aarch-64) from libtool-ltdl-devel libuuid-devel


author: liutao <liutao1@kylinos.cn> - 2.0.5-10.p01
changelog:
  - Modify spec file:corosync-devel(x86-64) to corosync-devel 
  	remove (x86-64) from libtool-ltdl-devel libuuid-devel


author: shenyangyang <shenyangyang4@huawei.com> - 1.88-3
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:delete unneeded build requires of perl-Test-Warn and perl-Test-Exception


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: rhbz#1901555
    Resolves: rhbz#1898223
    Resolves: rhbz#1898329


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: rhbz#1901556
    Resolves: rhbz#1898222
    Resolves: rhbz#1898328


author: Paul Howarth <paul@city-fan.org> - 2.4.3-1
changelog:
  - Update to 2.4.3
    - Fix Ed25519 key handling so certain key comment lengths don't cause
      'SSHException("Invalid key")' (GH#1306, GH#1400)
    - Add support for the modern (as of Python 3.3) import location of
      'MutableMapping' (used in host key management) to avoid the old location
      becoming deprecated in Python 3.8


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.2-4
changelog:
  - Subpackage python2-wrapt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-8
changelog:
  - Subpackage python2-lazy-object-proxy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-64.se.09
changelog:
  - Add patch fix-add-group-sss_cache-error.patch 
  - Add patch fix-failed-to-flush-sssd-cache.patch 
    Fix the system cannot boot up after switch to custom selinux and then to stirct.


author: caoshuhao <caoshuhao@kylinos.cn> - 3.14.2-64.se.12
changelog:
  - Add patch fix-login-stuck-targeted-ukmcs.patch
    Fix the system stucked in strict and custom when logining.


